Install pip with apt.
Install virtualenv with apt.
Create a dedicated user/group to run the app.