Comment by adastra22

Inside the container though. The whole point of which is that it sandboxes and isolates the running code.