Hacker News Reader

I mentioned this in another comment thread, but we use gVisor to enforce isolation. https://gvisor.dev/users/

It's also used by Google Kubernetes Engine, OpenAI, and Cloudflare among others to run untrusted code.

And Google's own serverless offerings (App Engine, Cloud Run, Cloud Functions) :-)

Disclaimer: I'm an SRE on the GCP Serverless products.

Neat, thanks for sharing! Glad to know we're in good company here.