# Server-side sandboxing: Containers and seccomp

DevFeed: [Server-side sandboxing: Containers and seccomp](<https://devfeed.tech/articles/server-side-sandboxing-containers-and-seccomp-10038.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/server-side-sandboxing-containers-and-seccomp/>)

Author: Hongyi Hu; Max Serrano

Published: 2023-10-24T00:00:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Containers](<https://devfeed.tech/topics/containers.md>), [Security](<https://devfeed.tech/topics/security.md>), [Figma](<https://devfeed.tech/topics/figma.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Docker](<https://devfeed.tech/topics/docker.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [SELinux](<https://devfeed.tech/topics/selinux.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [container-escape](<https://devfeed.tech/tags/container-escape.md>), [containers](<https://devfeed.tech/tags/containers.md>), [docker](<https://devfeed.tech/tags/docker.md>), [figma](<https://devfeed.tech/tags/figma.md>), [linux](<https://devfeed.tech/tags/linux.md>), [security](<https://devfeed.tech/tags/security.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [selinux](<https://devfeed.tech/tags/selinux.md>), [systems](<https://devfeed.tech/tags/systems.md>)

## AI overview

This article explains how Figma uses containers and seccomp for server-side sandboxing and security isolation. It compares container isolation with virtual machines, examines container escape risks, and describes how runtime behavior, operating-system primitives, and configuration affect security.

## Source excerpt

Containers and secure computing mode (seccomp) are sandboxing primitives that offer a lighter weight alternative to virtual machines (VMs). Here we cover the differences between them, and how we use both at Figma to achieve security isolation.