[tintor]

No root. `pip` and `npm install` don't require it.

You can not use `sudo apt install` inside it.

They use gVisor, and other container isolation mechanisms: https://ryan.govost.es/2025/openai-code-interpreter/

[bandrami]

OTOH if you have apt, you have arbitrary shell commands (hooray dpkg-hooks!)

Golden years for cybersecurity people