this post was submitted on 15 Oct 2024
107 points (99.1% liked)
chat
8174 readers
394 users here now
Chat is a text only community for casual conversation, please keep shitposting to the absolute minimum. This is intended to be a separate space from c/chapotraphouse or the daily megathread. Chat does this by being a long-form community where topics will remain from day to day unlike the megathread, and it is distinct from c/chapotraphouse in that we ask you to engage in this community in a genuine way. Please keep shitposting, bits, and irony to a minimum.
As with all communities posts need to abide by the code of conduct, additionally moderators will remove any posts or comments deemed to be inappropriate.
Thank you and happy chatting!
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I think this would best work by writing up a simple Dockerfile for Docker or Podman (one may already exist out there) and at minimum containerizing the work. That level of constraint is likely all that's needed and the end user can also control how much CPU is used, the networking interface to possibly proxy the connection if desired, and what directories are accessible.
Alternatively, a VM could accomplish the same in terms of safety. Of course a VM requires a pre-allocated block of RAM and a full guest OS installation.