Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on How to allow users to execute code on my SaaS product server-side?.
1. Run code in docker container.
2. Within container run code as unprivileged user.
3. SELinux harden container.
4. Don’t run container as admin if you don’t have to.
5 Specify CPU and memory allowance per container. Run container for make T time.
6. Use a queue to govern how containers are spun up.
7. Don’t reuse containers.
8. Dependent on language, configure compiler/interpreter to disallow risky features.
There are no comments on this comment yet.
1. Run code in docker container.
2. Within container run code as unprivileged user.
3. SELinux harden container.
4. Don’t run container as admin if you don’t have to.
5 Specify CPU and memory allowance per container. Run container for make T time.
6. Use a queue to govern how containers are spun up.
7. Don’t reuse containers.
8. Dependent on language, configure compiler/interpreter to disallow risky features.