microsandbox/microsandbox

Features

• Untrusted Code Sandboxes - Provides a runtime that executes untrusted code in disposable hardware-isolated microVMs.
• Hardware-Level Isolation - Uses microVM technology to provide hardware-backed security boundaries between the host and untrusted workloads.
• AI Agent Tool Integrations - Provides interfaces that connect AI models to external tools and file management for functional task execution.
• Agent Interface Servers - Implements a server that exposes local tool definitions and API capabilities to AI clients.
• Virtual Machine Managers - Functions as an embedded virtual machine manager allowing direct control of VM lifecycles within application code.
• Embedded VM Managers - Allows spawning and controlling virtual machines directly within code without the need for a background daemon.
• Workload Orchestration - Manages the lifecycle of multiple microVMs including resource limits, image deployment, and performance monitoring.
• Isolated Execution Sandboxes - Executes commands and applications within secure, resource-constrained microVM sandboxes.
• MicroVM Sandboxes - Executes untrusted code inside hardware-isolated microVMs with independent kernels to protect the host system.
• Agent Execution Environments - Provides an isolated runtime specifically configured for running autonomous agents and their associated tasks.
• VM Image Bootstrapping - Bootstraps isolated environments using standard container image formats and volume workflows for consistent setup.
• OCI Virtual Machine Image Management - Supports running standard images from registries using OCI-compatible virtual machine image management.
• OCI Image Sandboxes - Uses standard container images and volume workflows to initialize isolated guest virtual machines.
• Sandbox Lifecycle Management - Provides comprehensive controls to create, start, stop, and remove named isolated environments.
• Sandbox Detachments - Supports executing sandboxes in a background mode to allow for long-lived processes and persistent environments.
• VM Process Orchestrators - Manages lightweight virtual machines as individual child processes to eliminate the need for a background daemon.
• Code Executors - Provides isolated environments for running commands with restricted CPU and memory limits to prevent host interference.
• Code Sandboxing Environments - Runs commands within isolated environments and captures the output for the host application.
• Runtime Secret Injection - Implements a secure channel for injecting sensitive keys at runtime to prevent them from residing in guest memory.
• Secret Injection Mechanisms - Implements a secret management mechanism that prevents sensitive keys from entering virtual machine memory.
• Secrets Management - Handles sensitive keys and credentials to prevent them from ever entering the virtual machine memory.
• Hypervisor Resource Monitoring - Provides live tracking of CPU, memory, and network statistics for running sandboxes via hypervisor queries.
• Out-of-Band Management - Tracks CPU and memory usage via the hypervisor using a channel separate from the guest operating system.
• Sandbox and Virtualization - Self-hosted platform for secure execution of AI code.
• More to explore - Secure sandbox for code execution.

Star history