3 ms·
I ran a little app that required arbitrary latex execution and I think a similar set up would apply: 1. Run code in docker container. 2. Within container run
by usgroup 4y ago
I ran a little app that required arbitrary latex execution and I think a similar set up would apply:
1. Run code in docker container.
2. Within container run code as unprivileged user.
3. SELinux harden container.
4. Don’t run container as admin if you don’t have to.
5 Specify CPU and memory allowance per container. Run container for make T time.
6. Use a queue to govern how containers are spun up.
7. Don’t reuse containers.
8. Dependent on language, configure compiler/interpreter to disallow risky features.