Hacker News new | ask | show | jobs
by bluelightning2k 1419 days ago
How do you safely run untrusted user code?

Thanks for building this.

(Won't use it personally as being a pro developer I'd always use my existing cloud provider)

3 comments

In nodejs you can use the vm module. And for extra layers you can run node itself in a linux namespace aka container. Inside a VPS that has selinux. On a dedicated server with no LAN access besides the gateway. In a fireproof datacenter.
Good question! We use the Deno (https://deno.land) runtime which comes with built it permissions mgmt
If we were to support more runtimes, I think I'd go for Firecracker (https://github.com/firecracker-microvm/firecracker/) which is what AWS uses for lambdas