Description
The native driver will be actually a good idea to run the tests on the actual hardware or run the automated images build using the host installed tools.
I think the best approach is to use the OS capabilities to restrict the access:
- Create new user for each execution
- Mount user home as separated disk with defined space restriction or use quotas
- Native driver: Use firewall and default route manipulation to restrict the network access #52
- Make sure no signs of user data left on the system after the user was removed
- Native driver: Reboot the machine if needed before the next workload #53
Initially MacOS implementation seems a good starting point and when it's done we can think about the other platforms to have the same functionality.
related to: adobe/aquarium-bait#4