I recommend gvisor: https://gvisor.dev/ https://gvisor.dev/ If you want to learn more about this subject the keyword you’re looking for is “multitenancy” Dock

I recommend gvisor: https://gvisor.dev/ https://gvisor.dev/ If you want to learn more about this subject the keyword you’re looking for is “multitenancy” Docker’s container runtime is not really a safe way to run untrusted code. I don’t recommend relying on it. Also, why would an isolated vm prevent fetch? You can give your users NAT addresses to let them make outbound network calls. I am putting the finishing touches on a remote IDE that does exactly that.