Run in isolated container