topsycatt
Joined 6 years ago
Karma
921
Submissions
54
Member since
Oct 7
Joined 6 years ago
We actually use gVisor (as stated in the article) and it has a very nifty feature called checkpoint_restore (https://gvisor.dev/docs/user_guide/checkpoint_restore/) which lets us start up sandboxes extremely efficiently. Then the filesystem is just a CoW overlay.
The "run" option for generated code was removed due to underutilization, but the sandbox is still used for things like the data analysis workflow and running extensions amongst other things. It's really just a general purpose sandbox for running untrusted code server-side.
https://microsoft.ai/wp-content/uploads/2026/06/main_2026060...