Inquiry Regarding Privileged Container Permissions for Judge0
desphixs
HOBBYOP

7 months ago

Hello, I am trying to host the open-source platform Judge0, but the worker service fails when it attempts to create a secure sandbox for code execution. The logs show a "Failed to create control group" error, which suggests the application needs privileged access to the host system's kernel to manage cgroups (e.g., via --privileged or SYS_ADMIN capabilities). Could you please confirm if it's possible to grant these types of elevated permissions to a container on your platform, or if this kind of application with deep kernel dependencies is not supported in the Railway environment?

Solved

2 Replies

Railway
BOT

7 months ago

Hey there! We've found the following might help you get unblocked faster:

If you find the answer from one of these, please let us know by solving the thread!


7 months ago

Hello,

At this time it would not be possible to grant such permissions to the containers.

Though this will be possible in the future because our next runtime is going to be VM based instead of container based.

So keep your eye out on our changelogs since that is where we will announce the VM runtime or Runtime V3 as it will likely be dubbed.

Best,

Brody


Status changed to Awaiting User Response Railway 7 months ago


Railway
BOT

6 months ago

This thread has been marked as solved automatically due to a lack of recent activity. Please re-open this thread or create a new one if you require further assistance. Thank you!

Status changed to Solved Railway 6 months ago


Loading...