ioi / isolate

Sandbox for securely executing untrusted programs
Other
1.1k stars 161 forks source link

Does the new cgv2 version of isolate need to be run as a privileged Docker container ? #124

Closed PhungThanhTu closed 1 year ago

ntut-xuan commented 1 year ago

I think not only v2, but also v1.

If your Isolate need the control group, you should privileged the container to have the extend privilege, or it may show the permission denied error.

Ref: https://docs.docker.com/engine/reference/commandline/run/