---
title: "Discussion on \"I build a Sandboxed CI Engine - What I Learned ?\" | Hashnode"
description: "Discussion on \"I build a Sandboxed CI Engine - What I Learned ?\". Stop container breakouts in your CI pipeline. See how to integrate gVisor (runsc) to intercept system calls and safely isolate multi-tenant workloads."
url: "https://hashnode.com/posts/diy-ci-cd-engine-gvisor-docker/6a3c222953ccefa59ad31ea2"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [I build a Sandboxed CI Engine - What I Learned ?](https://blogs.dorna.com.np/diy-ci-cd-engine-gvisor-docker?utm_source=hashnode&utm_medium=feed)

Stop container breakouts in your CI pipeline. See how to integrate gVisor (runsc) to intercept system calls and safely isolate multi-tenant workloads.

Jun 24 · 3 min read · blogs.dorna.com.np  
Read the article

-   [#ci-cd](https://hashnode.com/tag/ci-cd)
-   [#docker](https://hashnode.com/tag/docker)
-   [#docker-internals](https://hashnode.com/tag/docker-internals)
-   [#sandbox](https://hashnode.com/tag/sandbox)
-   [#dag](https://hashnode.com/tag/dag)
-   [#github-actions](https://hashnode.com/tag/github-actions)

## Written by

[Drona Raj Gyawali](https://hashnode.com/@drona-write)

@drona-write · Nepal

  
[View profile](https://hashnode.com/@drona-write)

Software Engineer

Revolves around AI & Distributed Systems

## Responses

Markdown supported · ⌘↵ to post

No responses yet.