riju VS gvisor

Thanks for linking this. This is actually a superior offering to replit. They recently removed the ability to access a simple repl without logging in. Now you a) have to login and b) have to deal with this obtuse IDE-in-a-browser project creation shit. It's so many extra steps before I can run code.

I just want a URL in which I can run some code. https://riju.codes/ is literally that. Thanks!

An option is to do what I've done with my lang, Claro, getting the compiler and/or REPL hosted online on Riju. The maintainer is a very helpful guy that gave thorough docs you can follow for getting your language added. Check out https://riju.codes for the top level thing, and check out https://riju.codes/claro for an example what it looks like for a side project language to run there. Only issue there is you shouldn't expect regular redeploys as you continue working on the language. I just ask nicely every 3 or 4 months when I have some big change I'd like represented there and he redeploys.

There's the source code for such a site, if that would help: https://github.com/radian-software/riju

Docker + heavily restricted user + firewalls.. seems to get you much of the way there. I am aware that some work was done back in the pre-Docker day with Ruby's online sandbox to neuter Ruby's ability to make certain syscalls, but I imagine Docker, eBPF, or even using WebAssembly makes it a lot easier now.

Might as well link to an open source alternative: https://riju.codes/

Fun fact: Whenever I want to remember the name of this project, I just head over to https://HN.algolia.com and find out on the front page thanks to one of the most upvoted HN posts of all time, "Replit used legal threats to kill my open-source project": https://news.ycombinator.com/item?id=27424195

You should check out https://riju.codes it's really not that hard to get any old language running there :). It's a couple config files. I managed to get my language hosted there and the maintainer was really helpful in the process https://riju.codes/claro

Same here. However it did point me in the direction of the ex-interns awesome project which I used very often for technical interviews: https://riju.codes/

Faz fork do https://riju.codes (https://github.com/raxod502/riju) e implementa suporte pra matlab.

I miss the old repl.it, so I use https://riju.codes.

Isn't gVisor kind of this as well?

"gVisor is an application kernel for containers. It limits the host kernel surface accessible to the application while still giving the application access to all the features it expects. Unlike most kernels, gVisor does not assume or require a fixed set of physical resources; instead, it leverages existing host kernel functionality and runs as a normal process. In other words, gVisor implements Linux by way of Linux."

https://github.com/google/gvisor

This sort of feels like seeing someone riding a bike and saying: why don’t they just get a car? The simple fact is that containers and VMs are quite different. Whether something uses VMX and friends or not is also a red herring, as gVisor also “rolls it own VMM” [1].

[1] https://github.com/google/gvisor/tree/master/pkg/sentry/plat...

There's two major production-ready Go-based operating system(-ish) projects:

- Google's gVisor[1] (a re-implementation of a significant subset of the Linux syscall ABI for isolation, also mentioned in the article)

- USBArmory's Tamago[2] (a single-threaded bare-metal Go runtime for SOCs)

Both of these are security-focused with a clear trade off: sacrifice some performance for memory safe and excellent readability (and auditability). I feel like that's the sweet spot for low-level Go - projects that need memory safety but would rather trade some performance for simplicity.

[1]: https://github.com/google/gvisor

[2]: https://github.com/usbarmory/tamago

It uses gVisor to create a TCP/IP stack in userspace, and starts a wireguard interface on it, which the HTTP server from http.Serve listens on. The library will print a URL after startup, where you can access your server. You can create multiple listeners in one binary.

The playground compiles the program with GOOS=linux, GOARCH=amd64 and runs the program with gVisor. Detailed documentation is available at the gVisor site.

You could use a container sandbox like gVisor, light virtual machines as containers (Kata containers, firecracker + containerd) or full virtual machines (virtlet as a CRI).