--network=none
Real-time output from sandbox runner
/workspace
docker run --rm \ --network=none \ --memory=512m \ --cpus=1 \ --read-only \ --user=node \ -v /tmp/task-{id}:/workspace \ node:20-alpine