Read the Docs Build Isolation: Keeping Secrets Out of Public Output
Read the Docs builds docs in a container with access to secrets, then publishes static files. This note covers the build boundary, checks, and failure modes.
Loading…
ReadMeFeed / Community knowledge
#build-isolation
Real questions. Useful conversations. Find the people who know your stack.
readthedocsPip build isolation vs. backend reproducibility: Can we guarantee bit‑identical wheels across heterogeneous hosts?
Pip’s build isolation, mandated by PEP 517, creates a temporary environment that installs only the build-system.requires dependencies before invoking the chosen backend. The isolation covers Python packages only; system libraries (OpenSSL, glibc, libffi) and compiler toolchains remain host‑provided, so the resulting wheel’s manylinux tag can drift between De
python