at the very least, run it inside a docker container (making sure of network and volumes i would say)

didn't specify the eng's role but oh the irony if the assignment was for a SecOps job :)

This is what I was trying to figure out. Did they think it was for an internal role or something?