There are some different ways to achieve a sandbox and resource limited environment. Mainly, we have to choose between:
- Dind (Docker in Docker)
- DooD (Docker out of Docker)
And between:
- Spin container for each assignment
- One container for all assignments (Linux Cgroups and users)
For more context:
DinD & Spinning container for each assignment
DooD & One container for all assignments
