Imo the harder part is learning bespoke build processes that you may not own in order to get software that assumes it can perform arbitrary network access or ot

Imo the harder part is learning bespoke build processes that you may not own in order to get software that assumes it can perform arbitrary network access or other naughtiness at build time to build successfully in a restricted sandbox. The language is maybe a little strange at first but there's really not much to it.