[anonzzzies]

Bit off topic; we are looking for something like this but with a facility for untrusted users to run sandboxed code instead of trusted code. All that I found (but I am relatively new to this field) are hacky and, worse, slow solutions.

[bobbiechen]

What kind of sandboxing are you looking for, and what's the threat model? (My contact info is in my profile as well if you prefer)

[anonzzzies]

Our users (who are perhaps untrusted) write the compute for this and so, they cannot just do whatever they want. But it still has to be performant so kicking off containers so far is not great, however even they we couldn't find done.

[log4shell]

What is your use case?