e0e362d700
SDK Tests / changes (push) Waiting to run
SDK Tests / Python SDK Tests (sandbox) (push) Blocked by required conditions
SDK Tests / CLI Quality (push) Blocked by required conditions
SDK Tests / CLI Tests (push) Blocked by required conditions
SDK Tests / Python SDK Quality (code-interpreter) (push) Blocked by required conditions
SDK Tests / Python SDK Quality (sandbox) (push) Blocked by required conditions
SDK Tests / Python SDK Tests (code-interpreter) (push) Blocked by required conditions
SDK Tests / JavaScript SDK Quality And Tests (code-interpreter) (push) Blocked by required conditions
SDK Tests / JavaScript SDK Quality And Tests (sandbox) (push) Blocked by required conditions
Deploy Docs Pages / build (push) Waiting to run
Deploy Docs Pages / deploy (push) Blocked by required conditions
Real E2E Tests / changes (push) Waiting to run
Real E2E Tests / Python E2E (docker bridge) (push) Blocked by required conditions
Real E2E Tests / Java E2E (docker bridge) (push) Blocked by required conditions
Real E2E Tests / JavaScript E2E (docker bridge) (push) Blocked by required conditions
Real E2E Tests / C# E2E (docker bridge) (push) Blocked by required conditions
Real E2E Tests / Go E2E (docker bridge) (push) Blocked by required conditions
Real E2E Tests / Real E2E CI (push) Blocked by required conditions
SDK Tests / Kotlin SDK Quality And Tests (sandbox) (push) Blocked by required conditions
SDK Tests / Kotlin SDK Quality And Tests (code-interpreter) (push) Blocked by required conditions
SDK Tests / C# SDK Quality And Tests (code-interpreter) (push) Blocked by required conditions
SDK Tests / C# SDK Quality And Tests (sandbox) (push) Blocked by required conditions
SDK Tests / Go SDK Quality And Tests (push) Blocked by required conditions
SDK Tests / SDK CI (push) Blocked by required conditions
9.5 KiB
9.5 KiB
server 0.1.9
What's New
✨ Features
- server proxy by websocket (#547)
- [EXPERIMENTAL] auto-renew on sandbox proxy/ingress access for OSEP-0009 (#535)
- [UNSTABLE] add Pool CRUD API and Kubernetes CRD service (#357)
🐛 Bug Fixes
- [IMPORTANT] restore lifecycle route serialization to omit None fields in JSON responses instead of emitting explicit null (#555)
- ensure httpx streaming responses are closed in sandbox proxy (#547)
- print exception stack when create workload failure (#524)
👥 Contributors
Thanks to these contributors ❤️
- @wangdengshan
- @Pangjiping
- @ninan-nn
- PyPI: opensandbox-server==0.1.9
- Docker Hub: opensandbox/server:v0.1.9
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.9
server 0.1.8 [DEPRECATED]
What's New
✨ Features
- bump execd's image to v1.0.8 (#502)
- Add [egress].mode (dns | dns+nft, default dns); wire to sidecar as OPENSANDBOX_EGRESS_MODE on both Docker and Kubernetes (#501)
- add per-sandbox egress auth header generation and propagation through lifecycle endpoint responses (#492)
- support no-timeout (manual cleanup) in Kubernetes sandbox service (#466)
- support manual cleanup sandboxes (#446)
- implement OSSFS storage for Docker service in sandbox lifecycle (#340)
🐛 Bug Fixes
- Kubernetes egress: Run the sidecar privileged; use a startup command (sysctl for net.ipv6.conf.all.disable_ipv6, then /egress) instead of Pod securityContext.sysctls for IPv6; remove build_ipv6_disable_sysctls. (#501)
- reuse a single volume per claim_name and add multiple volumeMounts instead of one volume per Volume object. (#458)
- fix Docker server-proxy endpoint resolution for bridge sandboxes with egress sidecar by falling back to host-mapped endpoint resolution when internal IP resolution is not applicable (#492)
- increase default pids_limit to 4096 for production use (#496)
- increase default pids_limit to 4096 for production use (#495)
- Fixes the issue where GET requests with query parameters fail through the sandbox proxy while POST requests succeed (#485)
- fix: sanitize subprocess call in ossfs_mixin.py (#461)
- treat the singular Trailer header as hop-by-hop in the sandbox proxy route (#479)
- Remove duplicate sandbox_service instantiation in server lifespan (#468)
- restore port allocation for user-defined Docker networks (#467)
- fix(server): use asyncio.sleep instead of time.sleep in sandbox create (#489)
- disable IPv6 in execd init for Kubernetes egress, fix #501 (#514)
👥 Contributors
Thanks to these contributors ❤️
- @Pangjiping
- @ninan-nn
- @claw-mini-zz
- @joaquinescalante23
- @orbisai0security
- @Gujiassh
- @wishhyt
- @ctlaltlaltc
- @hittyt
- @skyler0513
- PyPI: opensandbox-server==0.1.8
- Docker Hub: opensandbox/server:v0.1.8
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.8
server 0.1.7
What's New
✨ Features
- refactor kubernetes client service and add rate limter (#429)
- add pvc support in agent-sandbox/batchsandbox runtime (#424)
- support user-defined Docker network stack (#426)
- add server rbac for secrets (#396)
- support image auth in batchsandbox provider (#395)
🐛 Bug Fixes
- clean up failed egress sidecar startup (#418)
- strip hop-by-hop proxy headers (#408)
- currect Kubernetes label key validation (#398)
- use internal endpoint resolution for server proxy mode (#404)
- clean up container when runtime prep fails (#394)
👥 Contributors
Thanks to these contributors ❤️
- @Generalwin
- @Gujiassh
- @Spground
- @ctlaltlaltc
- @zerone0x
- @suger-m
- @jinghuan-Chen
- PyPI: opensandbox-server==0.1.7
- Docker Hub: opensandbox/server:v0.1.7
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.7
server 0.1.6
What's New
✨ Features
- secure container e2e case & guide doc (#249)
- add configurable resources in execd init container (#349)
🐛 Bug Fixes
- reject websocket upgrades before proxying (#374)
- normalize sandbox resource names to DNS-1035 (#335)
- reject unsupported image.auth with actionable error (#364)
- fix create sandbox timeout in k8s service. No need to wait pod running when create sandbox (#349)
- fix file download path encoding and host volume validation errors (#257)
📦 Misc
- sync latest image for v-prefixed TAG (#331)
👥 Contributors
Thanks to these contributors ❤️
- @fengcone
- @liuxiaopai-ai
- @Gujiassh
- @stablegenius49
- @Generalwin
- @RonaldJEN
- @Pangjiping
- PyPI: opensandbox-server==0.1.6
- Docker Hub: opensandbox/server:v0.1.6
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.6
server 0.1.5
What's New
✨ Features
- add server.eip config for endpoint host in Docker runtime (#316)
- preserve proxy HTTP errors and add route coverage (#312)
- span X-Request-ID by server log (#269)
🐛 Bug Fixes
- validate list metadata query format strictly (#316)
- forward query string in sandbox proxy handler (#266)
📦 Misc
- fix packaging config (#325)
- add sandbox router test coverage (#306)
- add list sandbox test coverage (#292)
- add create and delete sandbox test coverage (#291)
- add renew sandbox test coverage (#290)
- add pause and resume sandbox test coverage (#289)
- add get sandbox endpoint test coverage (#288)
- opensandbox server deployment helm charts (#302)
- update README for kubernetes service (#298)
- add bootstrap operation-not-permitted troubleshooting (#286)
- clarify compose bridge networking and proxy usage (#285)
- update server helm template (#327)
- optimize workflow trigger (#320)
👥 Contributors
Thanks to these contributors ❤️
- @wangdengshan
- @liuxiaopai-ai
- @Spground
- @ninan-nn
- @Pangjiping
- PyPI: opensandbox-server==0.1.5
- Docker Hub: opensandbox/server:v0.1.5
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.5
server 0.1.4
What's New
🐛 Bug Fixes
- Do not validate
OPEN-SANDBOX-API-KEYwhen request is proxied to sandbox (/sandboxes/{id}/proxy/... or /v1/sandboxes/{id}/proxy/...) (#250) - fix server deployment under docker compose bridge network (#256)
📦 Misc
- bump egress version to v1.0.1 (#259)
👥 Contributors
Thanks to these contributors ❤️
- @Pangjiping
- PyPI: opensandbox-server==0.1.4
- Docker Hub: opensandbox/server:v0.1.4
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.4
server 0.1.3
What's New
✨ Features
- support multi ingress gateway mode (#161)
- get kubernetes resource by informer (#213)
- add Docker named volume support with subPath for PVC backend (#233)
- support header ingress gateway mode (#241)
🐛 Bug Fixes
- replaces os.path with posixpath for paths used inside containers to ensure forward slashes are used regardless of the host OS (fixing Windows support) (#234)
📦 Misc
- Potential fix for code scanning alert no. 92: Workflow does not contain permissions (#239)
👥 Contributors
Thanks to these contributors ❤️
- @hittyt
- @Pangjiping
- @dependabot
- PyPI: opensandbox-server==0.1.3
- Docker Hub: opensandbox/server:v0.1.3
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.3
server 0.1.2
What's New
✨ Features
- support local host volume mount in Docker runtime (#188)
- support NetworkPolicy by kubernetes provider (#190)
📦 Misc
- chore(deps): bump pyasn1 from 0.6.1 to 0.6.2 in /server (#195)
- chore(deps): bump urllib3 from 2.3.0 to 2.6.3 in /server (#194)
👥 Contributors
Thanks to these contributors ❤️
- @hittyt
- @Pangjiping
- @dependabot
- PyPI: opensandbox-server==0.1.2
- Docker Hub: opensandbox/server:v0.1.2
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.2
server 0.1.1
What's New
✨ Features
- [preview] add host/pvc volumes API definition (#166)
- support accessing sandbox endpoints via server built-in proxy (#172)
🐛 Bug Fixes
- create kubernetes resource name with sandbox-id (#163)
⚠️ Breaking Changes
- extract egress configuration as an independent module,
[runtime].egress_imageis not accepted, you can refer it from Configuration reference (#186)
📦 Misc
- package server as PyPI artifact (#170)
- fix server package name (#173)
- add Dockerfile for server image build (#176)
- add config generator for server package (#179)
- update README for server start with package (#175)
- update code owners (#187)
👥 Contributors
Thanks to these contributors ❤️
- @ninan-nn
- @hittyt
- @Pangjiping
- PyPI: opensandbox-server==0.1.1
- Docker Hub: opensandbox/server:v0.1.1
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.1
server 0.1.0
What's New
This is OpenSandbox server first release. OpenSandbox server is a production-grade, FastAPI-based service for managing the lifecycle of containerized sandboxes. It acts as the control plane to create, run, monitor, and dispose isolated execution environments across container platforms.
👥 Contributors
Thanks to these contributors ❤️
- @Generalwin
- @jwx0925
- @hittyt
- @ninan-nn
- @Pangjiping
- @yunnian
- PyPI: opensandbox-server==0.1.0
- Docker Hub: opensandbox/server:v0.1.0
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.0