There's the exec runner which can be used without any separation, so it's not very secure but doesn't require docker...