topic Workspace allows dbf path to install in Databricks 16.4 LTS in Data Engineering

Workspace allows dbf path to install in Databricks 16.4 LTS

AniruddhaGI — Wed, 18 Jun 2025 06:01:39 GMT

Feature: Library installation using requirements.txt on DB Runtime 16.4 LTS
Affected Areas: Workspace isolation, Library Management

Steps to Reproduce:

Upload a wheel file to dbf
Put the requirements.txt file in the Workspace and put dbfs path in requirements file
In the requirements.txt, include the line:
Install the requirements.txt file using the install feature in the UI.

Actual Behavior:
The library is successfully installed from the /dbfs path. This bypasses intended workspace isolation and allows cross-workspace library installation using shared file paths.

Expected Behavior:
The installation should fail or disallow usage of /dbfs paths that point to shared or non-local workspace files. Workspaces should be isolated and not have access to shared or external /dbfs content unless explicitly permitted.

Potential Impact:

Breaks workspace isolation guarantees.
May lead to security, compliance, or dependency management issues in regulated or multi-tenant environments.
Risk of using unverified or unintended code across environments.

Re: Workspace allows dbf path to install in Databricks 16.4 LTS

AniruddhaGI — Wed, 18 Jun 2025 06:11:19 GMT

I would like to know if the workspace isolation is a priority, and only Databricks 14.3 and lower allow installation via DBFS.

Why should the requirements.txt allow you to install libraries or packages via dbfs path?

Could someone please explain why this is the case?

Re: Workspace allows dbf path to install in Databricks 16.4 LTS

Krishna_S — Fri, 24 Oct 2025 01:54:04 GMT

Starting with DBR 15.1, storing libraries in the DBFS root is deprecated and disabled by default to improve workspace security. Upload libraries (Python wheels, JARs, Spark connectors) to Workspace Files, Unity Catalog volumes, or use a package repository instead.

Can you check if this configuration is enabled by any chance?

Re: Workspace allows dbf path to install in Databricks 16.4 LTS

AniruddhaGI — Wed, 29 Oct 2025 22:42:21 GMT

Yes I can confirm this is allowed.