Sandboxing for unsafe features

[sisp]

We currently require explicit user consent when a template contains unsafe features (Jinja2 extensions, tasks, migrations) because these allow arbitrary code execution on the user's host. I've been searching for sandboxing techniques for a while, but so far none have seemed lightweight and simple enough to be integrated with Copier – until I stumbled over Zerobox today. A Python SDK for Zerobox seems to be on the way.

If anybody has experience with sandboxing (or even Zerobox in particular) and knows about limitations or things to watch out for security-wise, I'd be happy to discuss.

[sisp]

Just found another sandboxing tool: nono

[pawamoy]

Monty? https://github.com/pydantic/monty/

Probably too restrictive.

[sisp]

Monty is limited to Python code, right? I'm hoping for general process sandboxing.