Show HN: Chunk – Code sandbox for back-end devs

Re:Show HN: Chunk – Code sandbox for back-end devs by bluelightning2k on Friday July 29, 2022 @03:46PM (#32281037)

How do you safely run untrusted user code?

Thanks for building this.

(Won't use it personally as being a pro developer I'd always use my existing cloud provider)

[ Parent | on HN ]

Re:Show HN: Chunk – Code sandbox for back-end devs by z3t4 on Friday July 29, 2022 @05:00PM (#32281714)

In nodejs you can use the vm module. And for extra layers you can run node itself in a linux namespace aka container. Inside a VPS that has selinux. On a dedicated server with no LAN access besides the gateway. In a fireproof datacenter.

[ Parent | on HN ]

Re:Show HN: Chunk – Code sandbox for back-end devs by theochampion on Friday July 29, 2022 @05:20PM (#32281908)

Good question! We use the Deno (https://deno.land) runtime which comes with built it permissions mgmt

[ Parent | on HN ]

Re:Show HN: Chunk – Code sandbox for back-end devs by theochampion on Saturday July 30, 2022 @01:09PM (#32288390)

If we were to support more runtimes, I think I'd go for Firecracker (https://github.com/firecracker-microvm/firecracker/) which is what AWS uses for lambdas

[ Parent | on HN ]