DEV Community

Discussion on: Building a secure/sandboxed environment for executing untrusted code

Collapse
 
mananchawla2005 profile image
Manan Chawla

Wonderfully written tutorial not much articles are there on this topic. I was myself working on making a code hosting website like repl.it myself. Thanks for telling about gvisor didnt know that earlier. Also i had a questions can we provide root access inside the container but with security assured so that the person doesnt somehow escalates itself to host server.

Collapse
 
narasimha1997 profile image
Narasimha Prasanna HN

Yes, since the isolation is at kernel level, you can provide root access inside the container. Also gVisor has many configuration options that might help you. For more configuration options, you can read the Documentation .

Collapse
 
mananchawla2005 profile image
Manan Chawla

Man this is awesome thanks alot once again. Also what if we wanna make windows sandboxes rather than linux. Any open source alternative for that?

Thread Thread
 
narasimha1997 profile image
Narasimha Prasanna HN

Hey, tbh, for windows there are not much sandboxing technologies that are free. Most of the products are paid ones. I would recommend you to use Linux distros or get a Linux setup running on a VM you can use VMWare basic emulator for that