# Runtime environment, private dependency

**URL:** <https://community.drivendata.org/t/runtime-environment-private-dependency/8352>\
**Category:** PETs Prize Challenge\
**Created:** [December 29, 2022, 5:50am UTC](https://community.drivendata.org/t/runtime-environment-private-dependency/8352 "2022-12-29T05:50:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![xbkaishui](https://avatars.discourse-cdn.com/v4/letter/x/9f8e36/32.png) [@xbkaishui](https://community.drivendata.org/u/xbkaishui)\
**Post date:** [December 29, 2022, 5:50am UTC](https://community.drivendata.org/t/runtime-environment-private-dependency/8352/1 "2022-12-29T05:50:03Z")

</div>

Hi,  
Our solution has private third party dependency, it can be installed by pip with our local repository.  
it’s better not to public pip repo, how should I update the runtime image ?  
@jayqi

thanks

---

<div class="post-metadata">

**Author:** ![isms](https://yyz2.discourse-cdn.com/flex028/user_avatar/community.drivendata.org/isms/32/9_2.png) [@isms](https://community.drivendata.org/u/isms)\
**Post date:** [December 29, 2022, 4:28pm UTC](https://community.drivendata.org/t/runtime-environment-private-dependency/8352/2 "2022-12-29T16:28:28Z")

</div>

Have you considered vendorizing the code into your submission as a module so you can import from it?

---

<div class="post-metadata">

**Author:** ![xbkaishui](https://avatars.discourse-cdn.com/v4/letter/x/9f8e36/32.png) [@xbkaishui](https://community.drivendata.org/u/xbkaishui)\
**Post date:** [December 30, 2022, 12:54am UTC](https://community.drivendata.org/t/runtime-environment-private-dependency/8352/3 "2022-12-30T00:54:04Z")

</div>

some of the code is written in c++, I think it’s not able to as a module

---

<div class="post-metadata">

**Author:** ![jayqi](https://yyz2.discourse-cdn.com/flex028/user_avatar/community.drivendata.org/jayqi/32/924_2.png) [@jayqi](https://community.drivendata.org/u/jayqi)\
**Post date:** [December 30, 2022, 6:24pm UTC](https://community.drivendata.org/t/runtime-environment-private-dependency/8352/4 "2022-12-30T18:24:19Z")

</div>

Hi @xbkaishui,

It’s quite possible that you can still vendor your dependency, including compiled binaries. If you install your dependency on an equivalent system (the runtime image uses `ubuntu20.04`), and you can then copy out what gets installed into `site-packages/`.

Additionally, challenge organizers are considering adding an API to run a participant-supplied preparation shell script at the beginning of evaluation. This script would be bundled in your submission ZIP archive, and would be intended to do things like running dependency installation steps. If vendoring does not work, this may be a solution for your case. Note that this decision is not yet finalized, and that it will take some time before it is available in the runtime image.

---

<div class="post-metadata">

**Author:** ![xbkaishui](https://avatars.discourse-cdn.com/v4/letter/x/9f8e36/32.png) [@xbkaishui](https://community.drivendata.org/u/xbkaishui)\
**Post date:** [January 3, 2023, 1:56am UTC](https://community.drivendata.org/t/runtime-environment-private-dependency/8352/5 "2023-01-03T01:56:10Z")

</div>

ok, I think it it ok for me. thanks for you advice