As part of a system to run untrusted user code, I’ve considered allowing users to define their own execution environments using a Dockerfile.
So: is calling “fly launch --dockerfile pathToUserDockerfile --name someUserApp” safe? That is, is there some Dockerfile that would allow a user to gain control of the machine calling “fly launch”?