to avoid interaction with ~/.local which is the python cache
for package i use PYTHONNOUSERSITE.
it could interact during the build phase but more important
at runtime (if we have a more recent lib in our cache than in image)

raise a RuntimeError

root can always read/write file