Apparently they're running on machines with 24 Xeon cores too

print(open('/proc/cpuinfo').read())

Seems to have network access... I git cloned a small repo from git hub. It already has gcc installed. Looks like they should lock it down a bit more.

It's a tech demo; it'll be more locked down (no network access). The main thing is to tweak the host so the docker containers are routable to the proxy but no external network.

The 24 core Xeons are our (rackspace) OnMetal high memory boxes, you don't actually have 24 cores, docker just pulled that from the host, each container is limited.