Hacker News new | past | comments | ask | show | jobs | submit login

I mentioned this in another comment thread, but we use gVisor to enforce isolation. https://gvisor.dev/users/

It's also used by Google Kubernetes Engine, OpenAI, and Cloudflare among others to run untrusted code.




And Google's own serverless offerings (App Engine, Cloud Run, Cloud Functions) :-)

Disclaimer: I'm an SRE on the GCP Serverless products.


Neat, thanks for sharing! Glad to know we're in good company here.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: