We use gVisor! It's an open-source application security sandbox spun off from Google. We work with the gVisor team to get the features we need (notably GPUs / CUDA support) and also help test gVisor upstream https://gvisor.dev/users/
It's also used by Google Kubernetes Engine, OpenAI, and Cloudflare among others to run untrusted code.
It's also used by Google Kubernetes Engine, OpenAI, and Cloudflare among others to run untrusted code.