Does the policy prevent you from installing a virtual machine? Or you could install docker and do everything via ssh into your container.