I have a server A in my local network in my house. I want to allow someone to come to that server using a reverse ssh connection from my server to his server from which he can get to my server. I don't want him to be able to get inside my local net and be able to login on any other computer else than the server I give him. Of course I don't want him to be able to install any root kits or ruin my systems and server in a way that I can't get it back. Is it possible that I give him an empty home directory to work within that directory with python and twitter API And vim and also be able to monitor his own processes and their resources and be able to kill his own processes. But not be able to go anywhere outside that directory or install things or discover my local network? Also I want to know if logging all of his activity with pam is reliable.
My only requirement for the user is: being able to use vim, interactive python3 session (the user only needs a handful of safe libraries), running python3 codes (the user only needs a handful of safe libraries), and be able to use all the bandwidth(to twitter website only), cpu(aal cores), and memory resources of the server.