I'm taking the policy of system Python packages installed from distro packages (not pip), but otherwise use virtualenv. Mostly works.