Some challenges come with a Dockerfile to show you how the challenge is run. Note that the nsjail setup requires that you start the container with --privileged, i.e.: docker run --privileged $image

If you have any issues, feel free to ping tsuro on irc.