Open privat opened 8 years ago
A solution could be to run a sub-docker to execute binaries.
Another approach could be to have a single distinct service in the host that:
This seems to be quite safe if the process is outside any docker and does a single job at a time. The unclear part is how to communicate between the web server and the job-worker.
Find a way to execute compiled binary in a sandboxed environment isolated from the webserver.