2 ms·
On Linux it's a bit more DYI. Look at `unshare()` and cgroups to limit resources. For example your process scheduler could fork, create a new mount namespace w
by zimbatm 8y ago
On Linux it's a bit more DYI. Look at `unshare()` and cgroups to limit resources.
For example your process scheduler could fork, create a new mount namespace with unshare() , bind-mount the temporary workdir to a known location, drop privileges and the exec the target program.