Yes. An ncurses-based appliance configuration UI and a seccomp-sandboxed DSL environment. libtcl is really easy to sandbox with seccomp, I recommend it over [i

Yes. An ncurses-based appliance configuration UI and a seccomp-sandboxed DSL environment. libtcl is really easy to sandbox with seccomp, I recommend it over [interp create -safe]. Run the interpreter in a seccomp-enabled child and have the parent do all privileged operations. Set resource limits on the child. Have them communicate over a socketpair. Have the parent spawn sandboxed children whenever the rlimits run out. For what we're using it for, it works really nice.