<p>Kata containers is trying to make containers secure by providing more isolation.</p>

<blockquote>
  <p>lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs.</p>
</blockquote>

<p>If I am building a playground/code fiddle (something like <a href="https://ideone.com" rel="nofollow noreferrer">ideone</a>), are they secure enough to compile and run untrusted code? </p>

<p>Is this a good/intended use for this type of containers?</p>

<p>Any type of workload can potentially be used by <a href="https://katacontainers.io/" rel="nofollow noreferrer">Kata Containers</a>, just like regular containers. The idea behind them is providing the VM isolation that you don't get with regular containers. You can use Kata Container with <a href="https://github.com/kata-containers/runtime#introduction" rel="nofollow noreferrer">Docker and Kubernetes</a>.</p>

<p>You can achieve a decent level of isolation with regular containers using things like <a href="https://en.wikipedia.org/wiki/Seccomp" rel="nofollow noreferrer">seccomp</a>, <a href="https://en.wikipedia.org/wiki/Security-Enhanced_Linux" rel="nofollow noreferrer">SELinux</a>, <a href="http://man7.org/linux/man-pages/man7/capabilities.7.html" rel="nofollow noreferrer">Capabilities</a>, and/or <a href="https://en.wikipedia.org/wiki/AppArmor" rel="nofollow noreferrer">AppArmor</a> but it can get quite complicated. Kata Containers offers a simpler alternative to that.</p>
