7 releases
0.2.6 | Jun 5, 2025 |
---|---|
0.2.5 | May 27, 2025 |
0.1.0 | May 20, 2025 |
#1969 in Filesystem
686 downloads per month
Used in 2 crates
635KB
11K
SLoC
microsandbox
is a secure MicroVM provisioning system for running untrusted code in isolated environments.
Overview
microsandbox provides a robust foundation for running AI workloads in isolated microVMs. It handles:
- VM lifecycle management
- OCI image distribution and management
- Service orchestration and coordination
- Resource constraints and monitoring
- Database persistence for system state
Key Features
- Secure Isolation: True VM-level isolation through microVMs
- Container Experience: Works with standard OCI/Docker images
- Fast Startup: Millisecond-level VM provisioning
- Resource Control: Fine-grained CPU, memory and network limits
- Simple API: RESTful interface for service management
- Persistence: Database-backed state management
Architecture
microsandbox consists of several key components:
- VM: Low-level microVM configuration and management
- OCI: Image pulling, layer handling, and registry interactions
- Management: Orchestration, sandbox lifecycle, and coordination
- Runtime: Process supervision and monitoring
- Models: Database and persistence schema
Modules
config
- Configuration types and validationmanagement
- Central management for sandboxes, images, and orchestrationmodels
- Database models and persistence schema- [
oci
] - OCI image and registry operations runtime
- Process supervision and monitoringutils
- Common utilities and helpers- [
vm
] - MicroVM configuration and control
microsandbox-core
Dependencies
~45–63MB
~1M SLoC