Fix Bazel PEP 517 Build Environment Isolation and Sandbox Restrictions

Author: vkarampudi

setup.py

@@ -90,10 +90,27 @@ def run(self):
                 bazel_version = f.read().strip()
                 os.environ["USE_BAZEL_VERSION"] = bazel_version
 
+        pythonpath = os.environ.get("PYTHONPATH", "")
+        # Include sys.path entries to support PEP 517 isolated build environments
+        sys_path_entries = os.pathsep.join([p for p in sys.path if p])
+        if pythonpath:
+            pythonpath = os.pathsep.join([pythonpath, sys_path_entries])
+        else:
+            pythonpath = sys_path_entries
+
+        bazel_args = [
+            self._bazel_cmd,
+            "run",
+            "-c",
+            "opt",
+            f"--repo_env=PYTHON_BIN_PATH={sys.executable}",
+            f"--repo_env=PYTHONPATH={pythonpath}",
+        ]
+        bazel_args.extend(self._additional_build_options)
+        bazel_args.append("//tensorflow_data_validation:move_generated_files")
+
         subprocess.check_call(
-            [self._bazel_cmd, "run", "-c", "opt"]
-            + self._additional_build_options
-            + ["//tensorflow_data_validation:move_generated_files"],
+            bazel_args,
             # Bazel should be invoked in a directory containing bazel WORKSPACE
             # file, which is the root directory.
             cwd=os.path.dirname(os.path.realpath(__file__)),
@@ -225,7 +242,7 @@ def select_constraint(default, nightly=None, git_master=None):
         ),
         "tfx-bsl"
         + select_constraint(
-            default="@git+https://github.com/vkarampudi/tfx-bsl@testing",
+            default="@git+https://github.com/vkarampudi/tfx-bsl@master",
             nightly=">=1.18.0.dev",
             git_master="@git+https://github.com/tensorflow/tfx-bsl@master",
         ),

third_party/python_configure.bzl

@@ -205,7 +205,11 @@ def _raw_exec(repository_ctx, cmdline):
     Returns:
       The 'exec_result' of repository_ctx.execute().
     """
-    return repository_ctx.execute(cmdline)
+    env = {}
+    for k in ["PYTHONPATH", "PYTHON_BIN_PATH", "PYTHON_LIB_PATH"]:
+        if k in repository_ctx.os.environ:
+            env[k] = repository_ctx.os.environ[k]
+    return repository_ctx.execute(cmdline, environment = env)
 
 def _read_dir(repository_ctx, src_dir):
     """Returns a sorted list with all files in a directory.
@@ -476,6 +480,7 @@ _ENVIRONS = [
     BAZEL_SH,
     PYTHON_BIN_PATH,
     PYTHON_LIB_PATH,
+    "PYTHONPATH",
 ]
 
 local_python_configure = repository_rule(