microsandbox/microsandbox
Microsandbox
Microsandbox 是一个微型虚拟机（microVM）沙箱运行时和硬件隔离的代码执行器，专为运行不受信任的代码而设计。它作为一个嵌入式虚拟机管理器，允许应用程序在代码中直接生成和控制轻量级虚拟机，而无需后台守护进程。
该系统通过公开服务器控件为 AI 代理提供安全执行环境，允许它们执行工具和管理文件。它利用标准容器镜像格式和卷工作流来初始化客户虚拟机，并实现了一种秘密管理机制，防止敏感密钥进入虚拟机内存。
该平台涵盖了隔离工作负载编排的完整生命周期，包括环境的创建、监控和移除。它包括针对 CPU 和内存的带外资源监控、客户镜像缓存，以及执行即时命令和分离后台会话的功能。
Features
- Untrusted Code Sandboxes - Provides a runtime that executes untrusted code in disposable hardware-isolated microVMs.
- Hardware-Level Isolation - Uses microVM technology to provide hardware-backed security boundaries between the host and untrusted workloads.
- AI Agent Tool Integrations - Provides interfaces that connect AI models to external tools and file management for functional task execution.
- Agent Interface Servers - Implements a server that exposes local tool definitions and API capabilities to AI clients.
- Virtual Machine Managers - Functions as an embedded virtual machine manager allowing direct control of VM lifecycles within application code.
- Embedded VM Managers - Allows spawning and controlling virtual machines directly within code without the need for a background daemon.
- Workload Orchestration - Manages the lifecycle of multiple microVMs including resource limits, image deployment, and performance monitoring.
- Isolated Execution Sandboxes - Executes commands and applications within secure, resource-constrained microVM sandboxes.
- MicroVM Sandboxes - Executes untrusted code inside hardware-isolated microVMs with independent kernels to protect the host system.
- Agent Execution Environments - Provides an isolated runtime specifically configured for running autonomous agents and their associated tasks.
- VM Image Bootstrapping - Bootstraps isolated environments using standard container image formats and volume workflows for consistent setup.
- OCI Virtual Machine Image Management - Supports running standard images from registries using OCI-compatible virtual machine image management.
- OCI Image Sandboxes - Uses standard container images and volume workflows to initialize isolated guest virtual machines.
- Sandbox Lifecycle Management - Provides comprehensive controls to create, start, stop, and remove named isolated environments.
- Sandbox Detachments - Supports executing sandboxes in a background mode to allow for long-lived processes and persistent environments.
- VM Process Orchestrators - Manages lightweight virtual machines as individual child processes to eliminate the need for a background daemon.
- Code Executors - Provides isolated environments for running commands with restricted CPU and memory limits to prevent host interference.
- Code Sandboxing Environments - Runs commands within isolated environments and captures the output for the host application.
- Runtime Secret Injection - Implements a secure channel for injecting sensitive keys at runtime to prevent them from residing in guest memory.
- Secret Injection Mechanisms - Implements a secret management mechanism that prevents sensitive keys from entering virtual machine memory.
- Secrets Management - Handles sensitive keys and credentials to prevent them from ever entering the virtual machine memory.
- Hypervisor Resource Monitoring - Provides live tracking of CPU, memory, and network statistics for running sandboxes via hypervisor queries.
- Out-of-Band Management - Tracks CPU and memory usage via the hypervisor using a channel separate from the guest operating system.
- Sandbox and Virtualization - Self-hosted platform for secure execution of AI code.
- More to explore - Secure sandbox for code execution.
