How to deny access to a Docker container?

Question

System administration

Hello.
There is some software that you can interact with in a Docker container.
Inside the container itself, Ubuntu is deployed and the software itself is written.

Is it possible to somehow close access to the Docker container.
By access I mean accessing the filesystem inside the container, logging into the container with e.g. docker exec -it containrname bash etc.
That is, the point is that the user could not get there, only pass information like "execute such and such a script" and that's it.
The container itself runs .sh scripts, but it is important to keep their algorithms inaccessible.

If this is not possible with docker, who might know of any alternatives.
Requirements for these alternatives:
- The ability to run a full-fledged Ubuntu inside the container (let's call it abstractly)
- The availability of this very alternative for Windows / Linux
- It is very desirable that this very alternative be open source, but safe

Who could tell what?
I will be glad to discuss =)

Thank you in advance for your attention!

Answer 1

The sources of the algorithms are not available, but they can be executed - it sounds like an API. Well, i.e. any variation of HTTP/grpc/whatever.

Answer 2

Sounds like a set of requirements that docker, and indeed any container in general, does not meet well. An encrypted virtual machine is much better, and even then with reservations.

Answer 3

Anything that gets on the user's machine is, by definition, not protected. Any script and even a binary can be analyzed and logic can be extracted from there (docker layers are also just an archive with files). It's only a matter of time.
Deploy a virtual machine (even for each user) somewhere in the cloud and make a normal API.