awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
langgenius avatar

langgenius/dify-sandbox

0
View on GitHub↗
docs.dify.ai/development/backend/sandbox↗

Dify Sandbox

Dify-sandbox is a secure runtime environment designed for the execution of untrusted code snippets. It functions as a containerized sandbox that isolates processes from the host operating system, ensuring that arbitrary scripts can be run without granting them unauthorized access to sensitive data or critical system resources.

The project distinguishes itself through a multi-layered security approach that combines kernel-level isolation with strict resource management. By utilizing Linux namespaces and container-based process isolation, it partitions system resources to maintain visibility boundaries. Furthermore, it enforces security policies through system call filtering and hardware constraints, which prevent malicious code from exhausting memory or processing power.

The environment operates on an ephemeral model, discarding the entire runtime state after each task is completed to ensure no persistent side effects remain. This architecture supports the development of applications that require safe, isolated execution of external or user-provided code while maintaining overall system stability.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Code Execution Sandboxes - Provides a secure, isolated environment for executing arbitrary user-provided code snippets.
  • Linux Sandboxes - Uses Linux kernel namespaces to partition system resources and restrict process visibility.
  • Container Isolation - Isolates untrusted code execution within containerized environments using kernel namespaces.
  • Ephemeral Execution Environments - Discards runtime environments after task completion to ensure no persistent side effects.
  • Containerized Runtimes - Provides a containerized runtime for executing arbitrary scripts with resource and access protections.
  • Application Sandboxing - Creates isolated environments for safely executing external or user-provided code.
  • System-Call Access Controllers - Regulates and blocks operating system calls based on security policies to confine running code.
  • Secure Sandboxing - Enforces strict isolation policies at the kernel level to block malicious system calls.
  • Seccomp Profiles - Applies seccomp profiles to intercept and block restricted kernel system calls.
  • Container Cgroup Resource Limits - Enforces memory and CPU limits on containers to prevent host resource exhaustion.
  • Resource Usage Restrictions - Limits hardware usage and system calls to maintain system stability and prevent resource exhaustion.
1,116 stars·295 forks·Go·apache-2.0·49 views

Star history

Star history chart for langgenius/dify-sandboxStar history chart for langgenius/dify-sandbox

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Frequently asked questions

What does langgenius/dify-sandbox do?

Dify-sandbox is a secure runtime environment designed for the execution of untrusted code snippets. It functions as a containerized sandbox that isolates processes from the host operating system, ensuring that arbitrary scripts can be run without granting them unauthorized access to sensitive data or critical system resources.

What are the main features of langgenius/dify-sandbox?

The main features of langgenius/dify-sandbox are: Code Execution Sandboxes, Linux Sandboxes, Container Isolation, Ephemeral Execution Environments, Containerized Runtimes, Application Sandboxing, System-Call Access Controllers, Secure Sandboxing.

Which projects share features with langgenius/dify-sandbox?

Projects with overlapping indexed features include: netblue30/firejail — Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host… containers/bubblewrap — Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted… lxc/lxc — LXC is an OS-level virtualization framework and Linux container manager used to run multiple isolated Linux systems on… containers/crun — crun is a low-level container runtime that implements the Open Container Initiative specification for managing the… agent-infra/sandbox — This project provides secure, containerized infrastructure designed for autonomous agents, remote code execution, and… opensandbox-group/opensandbox — OpenSandbox is a secure execution environment and runtime designed for running untrusted code and scripts generated by…

Projects sharing features with Dify Sandbox

These projects share indexed features with Dify Sandbox. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • netblue30/firejailnetblue30 avatar

    netblue30/firejail

    7,069View on GitHub↗

    Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi

    C
    View on GitHub↗7,069
  • containers/bubblewrapcontainers avatar

    containers/bubblewrap

    5,839View on GitHub↗

    Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc

    Clinux-containersuser-namespaces
    View on GitHub↗5,839
  • lxc/lxclxc avatar

    lxc/lxc

    5,204View on GitHub↗

    LXC is an OS-level virtualization framework and Linux container manager used to run multiple isolated Linux systems on a single host. It functions as a kernel namespace orchestrator and unprivileged container runtime, allowing for the creation and management of system containers without the overhead of a hypervisor. The project provides unprivileged container execution by mapping container root users to unprivileged host users to prevent host system access. It ensures security through system call filtering and root user isolation, enabling containers to run without requiring host root privile

    C
    View on GitHub↗5,204
  • containers/cruncontainers avatar

    containers/crun

    3,975View on GitHub↗

    crun is a low-level container runtime that implements the Open Container Initiative specification for managing the lifecycle of isolated processes. It provides the core mechanisms for container creation, execution, and deletion, ensuring compatibility across platforms through standardized lifecycle management. The project distinguishes itself by offering a shared C library that allows container runtime operations to be embedded directly into other compiled applications. It further extends execution capabilities through specialized handlers that enable the deployment of containers within isola

    Ccontainersiotiot-cloud
    View on GitHub↗3,975
Compare all 30 related projects→

Curated searches featuring Dify Sandbox

Hand-picked collections where Dify Sandbox appears.
  • E2B SDK integration