Installing an extra pip package for copier

[wwuck]

How are you running Renovate?

Self-hosted Renovate

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

gitlab renovate/renovate:39.176.3

Please tell us more about your question or problem

I am attempting to use the copier manager and I am having trouble trying to use it with jinja extensions. Copier supports loading jinja extensions and my copier template uses extensions provided by the cookiecutter python package.

I have a custom renovate docker image where I run RUN install-tool python 3.12.9 and RUN install-pip cookiecutter 2.6.0 but I'm guessing because of binarySource=install, the cookiecutter ends up in a different python virtual environment from the copier install location.

With install-tool copier 9.5.0, copier gets installed into /opt/containerbase/tools/copier/9.5.0/3.12.9/.
install-pip cookiecutter 2.6.0 installs cookiecutter into /opt/containerbase/tools/cookiecutter/2.6.0/3.12.9/.

How can I get cookiecutter installed into the same python environment as copier?

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks

[rarkins]

It looks like copier installs for containerbase already have some custom logic related to jinja here: https://github.com/containerbase/base/blob/a61d520d293dc67d3f168ef7bf5361d7b4cfb083/src/cli/tools/python/utils.ts#L204-L206

[wwuck]

I tried to dig into containerbase source but I can't see any existing functionality that allows specifying extra python packages to install in the same virtual environment apart from the hardcoded copier-templates-extensions.

install-pip only accepts one package name and version as command the arguments. Is there any other documentation I should be looking at for containerbase, or is this missing functionality?

[rarkins]

We would not let users specify any pip package they want. But if a certain package was frequently used, it could be "hardcoded"

[wwuck]

Is that because of a security issue? I could hack it in by running

/opt/containerbase/tools/copier/9.5.0/3.12.9/bin/python -m pip install cookiecutter

inside my custom renovate dockerfile but I’m trying to avoid using undocumented methods that may change or disappear without warning.

Having said that, it looks like even install-tool is undocumented for renovate so it might not be such a bad way to go.

[rarkins]

Security