Build packages inside containers

[make-github-pseudonymous-again]

To mitigate the risk introduced by running arbitrary code from the AUR. Running in a container means you can restrict fs and network access and all subprocesses can be easily terminated after a given timeout.