Container Sandbox — Isolated Execution Environment
Run potentially dangerous operations inside ephemeral Docker containers. The host filesystem is protected — containers get read-only project mounts with a writable overlay.
When to Use
- Destructive Ansible playbooks (
--force,--limittesting) - Untrusted scripts from external sources
- Operations that modify system state (
rm -rf, package installs) - Testing migrations or schema changes before applying to production
- Running code
[Description truncada. Veja o README completo no GitHub.]