我们开始将我们的docker容器迁移到24.04版本，并在安装python依赖项期间从操作系统获得了以下建议：
root@76ea3b9e695a:/# pip install numpy
error: externally-managed-environment
× This environment is externally managed
╰─> To install Python packages system-wide, try apt install
python3-xyz, where xyz is the package you are trying to
install.
If you wish to install a non-Debian-packaged Python package,
create a virtual environment using python3 -m venv path/to/venv.
Then use path/to/venv/bin/python and path/to/venv/bin/pip. Make
sure you have python3-full installed.
If you wish to install a non-Debian packaged Python application,
it may be easiest to use pipx install xyz, which will manage a
virtual environment for you. Make sure you have pipx installed.
See /usr/share/doc/python3.12/README.venv for more information.
note: If you believe this is a mistake, please contact your Python installation or OS
distribution provider. You can override this, at the risk of breaking your Python
installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.
问题：
- 假设 python-* 没有涵盖我们所有的依赖项，那么 venv 方法是否确实是在 24.04容器中安装 python 依赖项以公开单个入口点应用程序的推荐方法，例如
__main__.py？ - 使用 python-* 作为依赖项有什么好处？ubuntu是否提供漏洞支持？