Comment by xxpor

if you're worried about arbitrary code exec from an ffmpeg vuln, docker is not a sufficient security boundary.