camerondurham / codecanvas

Remote code executor server, frontend, and CLI to run untrusted code as a non-root user in a Docker container.

Home Page:https://u64.cam/codecanvas

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Resources: add container fundamentals wiki/tutorial

camerondurham opened this issue · comments

commented

It would be nice to have a doc that defines the basics of containers and how to do some basic process isolation in Linux. This should eventually become a detailed doc of how we handle isolating potential malicious user code from the machine.

Document should include resources to good articles/DockerCon/KubeCon videos that are helpful.

  • document describes lower level container implementation
  • document links to learning resources
  • document includes how to use basic linux syscalls (i.e. unshare, pivot_root)