microsandbox/microsandbox
Microsandbox
Microsandbox est un runtime microVM sandbox et un exécuteur de code isolé matériellement conçu pour exécuter du code non fiable. Il fonctionne comme un gestionnaire de machine virtuelle embarqué qui permet aux applications de générer et de contrôler des machines virtuelles légères directement dans le code sans avoir besoin d'un démon en arrière-plan.
Le système fournit un environnement d'exécution sécurisé pour les agents IA en exposant des contrôles serveur qui leur permettent d'exécuter des outils et de gérer des fichiers. Il utilise des formats d'image de conteneur standard et des workflows de volumes pour initialiser les machines virtuelles invitées et implémente un mécanisme de gestion des secrets qui empêche les clés sensibles d'entrer dans la mémoire de la machine virtuelle.
La plateforme couvre le cycle de vie complet de l'orchestration de charges de travail isolées, incluant la création, la surveillance et la suppression des environnements. Elle inclut des capacités de surveillance des ressources CPU et mémoire hors bande, la mise en cache d'images invitées, et l'exécution de commandes immédiates ainsi que de sessions détachées en arrière-plan.
Features
- Untrusted Code Sandboxes - Provides a runtime that executes untrusted code in disposable hardware-isolated microVMs.
- Hardware-Level Isolation - Uses microVM technology to provide hardware-backed security boundaries between the host and untrusted workloads.
- AI Agent Tool Integrations - Provides interfaces that connect AI models to external tools and file management for functional task execution.
- Agent Interface Servers - Implements a server that exposes local tool definitions and API capabilities to AI clients.
- Virtual Machine Managers - Functions as an embedded virtual machine manager allowing direct control of VM lifecycles within application code.
- Embedded VM Managers - Allows spawning and controlling virtual machines directly within code without the need for a background daemon.
- Workload Orchestration - Manages the lifecycle of multiple microVMs including resource limits, image deployment, and performance monitoring.
- Isolated Execution Sandboxes - Executes commands and applications within secure, resource-constrained microVM sandboxes.
- MicroVM Sandboxes - Executes untrusted code inside hardware-isolated microVMs with independent kernels to protect the host system.
- Agent Execution Environments - Provides an isolated runtime specifically configured for running autonomous agents and their associated tasks.
- VM Image Bootstrapping - Bootstraps isolated environments using standard container image formats and volume workflows for consistent setup.
- OCI Virtual Machine Image Management - Supports running standard images from registries using OCI-compatible virtual machine image management.
- OCI Image Sandboxes - Uses standard container images and volume workflows to initialize isolated guest virtual machines.
- Sandbox Lifecycle Management - Provides comprehensive controls to create, start, stop, and remove named isolated environments.
- Sandbox Detachments - Supports executing sandboxes in a background mode to allow for long-lived processes and persistent environments.
- VM Process Orchestrators - Manages lightweight virtual machines as individual child processes to eliminate the need for a background daemon.
- Code Executors - Provides isolated environments for running commands with restricted CPU and memory limits to prevent host interference.
- Code Sandboxing Environments - Runs commands within isolated environments and captures the output for the host application.
- Runtime Secret Injection - Implements a secure channel for injecting sensitive keys at runtime to prevent them from residing in guest memory.
- Secret Injection Mechanisms - Implements a secret management mechanism that prevents sensitive keys from entering virtual machine memory.
- Secrets Management - Handles sensitive keys and credentials to prevent them from ever entering the virtual machine memory.
- Hypervisor Resource Monitoring - Provides live tracking of CPU, memory, and network statistics for running sandboxes via hypervisor queries.
- Out-of-Band Management - Tracks CPU and memory usage via the hypervisor using a channel separate from the guest operating system.
- Sandbox and Virtualization - Self-hosted platform for secure execution of AI code.
- More to explore - Secure sandbox for code execution.
