OpenAI Codex, Claude Code for web and Gemini Jules have all managed that.

You use firewalls to prevent code running inside the container from opening network connections to anywhere else. The harness that surrounds it can still be made accessible via the network.