3 ms·

... as root?

• zahlman 9mo ago
  Given that it's within a container on a remote server, does that matter?
  • acedTrex 9mo ago
    I mean i hope its more hardened than JUST a container given how many container escapes there are.
    • jchw 9mo ago
      Apparently, they are using gVisor, which when applied properly, should make a pretty good isolation primitive.
• tintor 9mo ago
  No root. `pip` and `npm install` don't require it. You can not use `sudo apt install` inside it. They use gVisor, and other container isolation mechanisms: https://ryan.govost.es/2025/openai-code-interpreter/ https://ryan.govost.es/2025/openai-code-interpreter/
  • bandrami 9mo ago
    OTOH if you have apt, you have arbitrary shell commands (hooray dpkg-hooks!) Golden years for cybersecurity people