why not just a docker container

Because that means you are sharing kernel with the sandboxed agent. Virtualization presents an infinitely smaller attack surface.

hwc 4 days ago | parent | next [-]

If there is any attack surface within a properly-configured container, that's a kernel bug, right?

	▲	matheusmoreira 4 days ago \| parent [-]
		Probably. If I remember correctly, containers on Linux are implemented using the kernel's namespaces. The same ones which became famous for the vulnerabilities they surfaced in previously unexercised code.

croes 4 days ago | parent | prev [-]

Then use SmolVM

	▲	matheusmoreira 4 days ago \| parent [-]
		I'm already using virtdev, my own solution built on top of QEMU.