Run function evaluators under AppArmor.
Create an AppArmor profile for the function evaluator and run the function evaluator containers with that profile enabled.
How to register an account on GitLab. To prevent spam, new accounts are locked until approved by an admin or the approver bot. You can also file an unlock request to expedite access.
Support: mw:GitLab, how to host a project on GitLab, #wikimedia-gitlab on libera.chat, #GitLab on Phabricator.
Create an AppArmor profile for the function evaluator and run the function evaluator containers with that profile enabled.