For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
Трамп высказался о непростом решении по Ирану09:14
。业内人士推荐夫子作为进阶阅读
Дания захотела отказать в убежище украинцам призывного возраста09:44
Последние новости
"Companies have broken their word before, facing little to no consequences," she said.