logoalt Hacker News

tintoryesterday at 10:32 PM1 replyview on HN

No root. `pip` and `npm install` don't require it.

You can not use `sudo apt install` inside it.

They use gVisor, and other container isolation mechanisms: https://ryan.govost.es/2025/openai-code-interpreter/


Replies

bandramitoday at 2:18 AM

OTOH if you have apt, you have arbitrary shell commands (hooray dpkg-hooks!)

Golden years for cybersecurity people