How to run code in an isolated environment?

Question

Virtualization

Let's say I'm writing a system for programming olympiads - participants pass the code, the server runs it on tests.

No one guarantees that there is nothing malicious in the code. How to run third-party scripts safely so that they don't have access to files and all sorts of low-level stuff?

Answer 1

if there is a separation of rights, then with user rights there is no access to "low-level things" - the user works in his folder with his rights. This is how most hosting companies work.
Jail is needed when you want the user to somehow create the appearance of a virtual machine, give him the right to do anything there, but so that he does not get out

Answer 2

Virtual machine, Jail, docker, file system filter with reset after reboot.
Choose any method

Answer 3

Jail

Answer 4

taken from this article https://blog.cloudflare.com/a-gentle-introduction-...
https://github.com/amluto/virtme
virtme-run \
--kimg bzImage \
--rw --pwd - -memory 512M \
--script-sh "what to run inside kvm"