CodeExec Engine v2 | Distributed Sandboxed Runner

Source Editor main.py

Presets:

IDLE

Waiting for execution...

FIFO Queue Depth exec:queue

Waiting jobs in Redis FIFO list. Max Backpressure capacity: 100

Dead-Letter Queue exec:dlq

Exhausted retry jobs isolated by watchdog crash recovery

Prometheus Scrape /metrics

Total execution observations recorded across cluster replicas

Execution Duration Metrics (Histogram Breakdown)

Language	Terminal Status	Total Executions	Total Time (ms)	Avg Latency (ms)
No metrics collected yet. Run a few submissions to generate telemetry.

8 Kernel-Enforced Docker Sandbox Security Constraints

Every container created across all 3 languages (Python, Node.js, C++) is strictly governed by these 8 immutable kernel isolation flags.

--memory=256m

Hard RAM limit. Prevents memory leaks; kernel triggers OOM killer (Exit Code 137).

--memory-swap=256m

Swap is completely disabled. Containers cannot page memory to host storage.

--pids-limit=50

Caps max subprocesses / threads. Neutralizes fork bombs instantly.

--network=none

Total network isolation. No outbound requests, data exfiltration, or socket binds.

--read-only

Root filesystem is mounted read-only. Malicious binaries cannot alter container image files.

--tmpfs /sandbox:16m

RAM-backed 16MB temporary directory. The only writable path, wiped on container destruction.

--user=65534

Runs as non-root UID 65534 (`nobody`). Prevents privilege escalation vulnerabilities.

--cap-drop=ALL

Drops all 38+ Linux kernel capabilities (chown, dac_override, sys_admin, etc.).

Session Execution Log

Time	Language	Status	Exit Code	Runtime	Job ID	Request ID
No executions recorded in this session.