> `docker run --rm -it -v $PWD/untrustedprogram:/untrustedprogram:ro ubuntu:latest` Not sure if running a program as root in a container is the best approach t

> `docker run --rm -it -v $PWD/untrustedprogram:/untrustedprogram:ro ubuntu:latest` Not sure if running a program as root in a container is the best approach to "fully sandbox" - depends on what the goal is, obviously.