codejail-service currently requires operators to create their own Dockerfile and AppArmor profile, an error-prone and technical process. It should be accompanied by a Tutor plugin instead.

Acceptance criteria:

• Tutor plugin created and linked
  • May be possible to crib from https://github.com/eduNEXT/tutor-contrib-codejail (plugin for a similar service)
  • Strongly consider sourcing from 2U's Dockerfile and AppArmor profile, which have been carefully vetted and annotated. (The AppArmor profile in particular is very delicate configuration, and any mistake can lead to complete compromise of the deployment.)
• Optional: See if there's a way to run the api_tests/ automatically as part of the Tutor deployment—these can help protect against misconfiguration.
• Find doc references to 2U's Dockerfile and AppArmor profile (which are linked as samples) and either replace them or accompany them with links to the Tutor plugin