For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
Yellow: Sub out
，这一点在爱思助手下载最新版本中也有详细论述
* @return pivot最终位置，详情可参考51吃瓜
The Tor Project torproject.org🇺🇸