bhubert

You could also start whichever container it needs (the docker work) yourself and just have the two containers container with eachother (e.g. docker compose, without granting access to docker socket), provided that the docker work is static enough that this would work.

You could also look into user gVisor runtime for extra security.

If not, then I think you're right about full VM.

I've been eyeing Gondolin for a while for that, but haven't yet tried it.

I know I'm a little lateto the party, but I want to make the point that I don't actually think that there being few women in leading roles is the problem. I think it is a symptom.

I think it is a symptom of a real underlying hidden problem that is the discourse of todays society is biasing the interests of our children differently based on gender.

A lot of places we're strongly associating the color blue with boys and the color pink with girls. We force these colors upon them while they're such a young age that they might grow the same associations. I think this also happens with attributes other than favorite color, attributes such as behavioral patterns. I'm bot saying there's not also a biological aspect to this, but noone I've read has any idea of how much is nurture and how much is nature, but it seems to me that when looking at our (as a society) practices with our small ones, there is certainly room for a great deal being nurture.

In short I don't think that the problem is that there are few women in leading roles, I think the problem is that we are raising our boys to want to be leaders and our girls to not.