Isolate the loading and running of user code

[eliza411]

Feature: Isolate the loading and running of user code
In order to ensure that my actions do not affect others and are not affected by others
As a web user
I want them to be isolated from others

Lotyrin said:
Interactions which involve loading/running user code should probably be isolated for safety reasons.

LXC offers comprehensive isolation features with fairly minimal resource consumption but there are still some decisions to be made:

How and when do we create containers
How do we make interactions with containers fast

I think we'll probably want to have a set number of "worker" containers pulling jobs and pushing results into a queue. It prevents exploding the number of containers that are active at a given time, but also should allow for a reasonable quality of service (response time, throughput)