Hi, I was looking at options to sandbox Tika (running in Docker). One option is seccomp, but I suspect that many syscals are being used by the JVM so it will not be very useful.
Another option is gvisor https://gvisor.dev/docs Did anyone try any of these, do you have experience with them? Thanks, Cristi
