Set up environments the way you like them in a single configuration file and provide students/users with a secure web interface where they can authenticate to start, stop, access, and revert their unique automatically-provisioned copy of the environment. Optionally, use a pfSense firewall to securely provide environments with internet access.