[wruza]

We need to go docker -_-

[notamy]

Inside of a VM, of course. Can't have enough protection!

[zacmps]

Then you remember that the VMware hypervisor was broken recently...

[orf]

that's fine, run the hypervisor inside virtualbox. For extra marks have it communicate to the host via smoke signals.