Ask HN: Running Untrusted Code as a Service?

5 points by tomasreimers 2y ago ↗ HN

Hi, I'm surprised I'm not targeted with Google ads when I ask this question, but I can't find what I'm looking for and so I'm turning here:

I need some way to pass an untrusted shell script (user generated) to a Linux / Windows / Mac environment and get the results. Is there some startup or AWS service that offers this? What I want is AWS with more runtimes and security guarantees...

4 comments

[ 3.2 ms ] story [ 16.8 ms ] thread

eimrine 2y ago ↗

Why not to use virtual machines for this?

mtmail 2y ago ↗

The untrusted code might try to access the host machine. Or run an endless loop, or fill the disk. I think OP is looking for a service that would deal with these edge cases (timeouts, resource limits, extra security layers).

gtirloni 2y ago ↗

A previous discussion about this use case here: https://news.ycombinator.com/item?id=32317520

Firecracker[0] always turns up in these discussions.

Also check Kata containers[1]

0 - https://aws.amazon.com/blogs/aws/firecracker-lightweight-vir...

1 - https://katacontainers.io

whodev 2y ago ↗

Why not use https://any.run?