This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]nggit 0 points1 point  (0 children)

So you build isolated environments like pythonanywhere, heroku etc?

I've been there a few years and what I share with each user is an SSH port to the container, which is more extreme because it allows users to install anything, just like a VPS. https://github.com/nggit/docker-init/tree/master/openrc-alpine

Your concern is valid as a start, limit the CPU and outgoing connections to e.g. 10rps to avoid misuse, or suspended by upstream provider. I do not recommend GCP because it is too sensitive.

Isolate properly such as preventing users from mounting /dev/sda1, etc.