Is there a good way to build a portable package containing dependencies for installing on an airgapped system?
Alternatively you can build a docker image using Bazel (for reproducibility) and use tools like Droot to chroot into the image then run.
https://cx-freeze.readthedocs.io/en/latest/
It's worked pretty well for us on both Linux and Windows environments.