There's the source code for such a site, if that would help: https://github.com/radian-software/riju https://github.com/radian-software/riju Docker + heavily r

There's the source code for such a site, if that would help: https://github.com/radian-software/riju https://github.com/radian-software/riju Docker + heavily restricted user + firewalls.. seems to get you much of the way there. I am aware that some work was done back in the pre-Docker day with Ruby's online sandbox to neuter Ruby's ability to make certain syscalls, but I imagine Docker, eBPF, or even using WebAssembly makes it a lot easier now.