# OpenSandbox | Alibaba | Knowledge Base | Instagit

OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.

GitHub Stars: 6.9k

Repository: https://github.com/alibaba/OpenSandbox

---

## Articles

### [How to Implement File Upload and Download Operations Within OpenSandbox Sandboxes](/alibaba/OpenSandbox/implement-file-upload-download-sandboxes-opensandbox)

Implement file upload and download in OpenSandbox using the execd daemon's HTTP filesystem API. Use FilesystemAdapter for secure and efficient file operations.

- Tags: how-to-guide
- Published: 2026-03-08

### [Communication Flow Between the OpenSandbox SDK, Server, and execd Component: A Complete Guide](/alibaba/OpenSandbox/communication-flow-sdk-server-execd-opensandbox)

Understand the OpenSandbox communication flow. Learn how the SDK, server, and execd component interact for sandboxes, endpoints, files, commands, and metrics.

- Tags: deep-dive
- Published: 2026-03-08

### [How to Configure Authentication for Accessing Private Container Registries in OpenSandbox Sandboxes](/alibaba/OpenSandbox/configure-private-container-registry-authentication-opensandbox)

Learn to configure authentication for private container registries in OpenSandbox sandboxes. Securely access your images using username and password with the Docker runtime in this guide.

- Tags: how-to-guide
- Published: 2026-03-08

### [Performance Comparisons Between Secure Container Runtimes Supported by OpenSandbox](/alibaba/OpenSandbox/performance-of-secure-container-runtimes-opensandbox)

Compare secure container runtimes like gVisor and Kata Containers with Firecracker and QEMU in OpenSandbox. Discover optimal performance for AI workloads and memory efficiency.

- Tags: performance
- Published: 2026-03-08

### [How the OpenSandbox Egress Sidecar Enforces Network Policies Using iptables](/alibaba/OpenSandbox/egress-sidecar-enforce-network-policies-iptables)

Learn how the OpenSandbox egress sidecar enforces network policies with iptables. Discover how it uses CAP_NET_ADMIN to redirect DNS traffic and ensure sandbox security.

- Tags: internals
- Published: 2026-03-08

### [Debugging Sandbox Provisioning and Command Execution in OpenSandbox: A Complete Guide](/alibaba/OpenSandbox/debug-sandbox-provisioning-command-execution-opensandbox)

Debug OpenSandbox provisioning and command execution with Python logs, Go execd hooks, and SDK HTTP debug mode. Trace issues from pod creation to final output.

- Tags: how-to-guide
- Published: 2026-03-08

### [OpenSandbox TTL Expiration: Automatic Sandbox Termination Explained](/alibaba/OpenSandbox/sandbox-ttl-expiration-behavior-opensandbox)

Learn how OpenSandbox automatically terminates containers when TTL expires. Understand the sandbox state transition to Terminated with reason ttl_expiry.

- Tags: internals
- Published: 2026-03-08

### [How to Integrate OpenSandbox with Kubernetes Using the Agent-Sandbox Component](/alibaba/OpenSandbox/integrate-opensandbox-kubernetes-agent-sandbox)

Learn how to integrate OpenSandbox with Kubernetes using the agent-sandbox component. Configure runtime, initialize client, and manage Sandbox resources in your cluster.

- Tags: how-to-guide
- Published: 2026-03-08

### [OpenSandbox SDK vs Code Interpreter SDK: Key Differences Explained](/alibaba/OpenSandbox/opensandbox-sdk-vs-code-interpreter-sdk)

Explore the OpenSandbox SDK vs Code Interpreter SDK. Discover key differences in container management and code execution capabilities for your next project.

- Tags: comparison
- Published: 2026-03-08

### [Routing Mechanisms of the OpenSandbox Ingress Gateway: Wildcard, URI, and Header-Based Routing](/alibaba/OpenSandbox/opensandbox-ingress-gateway-routing-mechanisms)

Explore OpenSandbox Ingress Gateway routing mechanisms: wildcard, URI, and header-based routing. Expose sandbox services efficiently on Kubernetes.

- Tags: deep-dive
- Published: 2026-03-08

### [How to Expose Web Services Running Inside OpenSandbox Sandboxes Through Accessible Endpoints](/alibaba/OpenSandbox/expose-web-services-from-sandboxes-endpoints)

Expose web services running in OpenSandbox sandboxes with the Endpoint API. Map internal sandbox ports to public addresses for seamless access to containerized applications. Discover how now.

- Tags: how-to-guide
- Published: 2026-03-08

### [OpenSandbox Resource Quota Limits: CPU, Memory, and GPU Constraints for Sandbox Containers](/alibaba/OpenSandbox/resource-quota-limits-sandbox-containers)

Discover OpenSandbox resource quota limits for CPU, memory, and GPU constraints. Learn how OpenSandbox manages sandbox containers with Kubernetes-style specifications.

- Tags: understanding
- Published: 2026-03-08

### [How OpenSandbox Uses Sandbox Pooling to Eliminate Cold-Start Latency](/alibaba/OpenSandbox/sandbox-pooling-improve-cold-start-performance)

Discover how OpenSandbox sandbox pooling slashes cold-start latency from seconds to milliseconds by pre-warming pods. Learn its benefits and implementation.

- Tags: performance
- Published: 2026-03-08

### [How to Configure Persistent Volume Mounts for Sandboxes in OpenSandbox](/alibaba/OpenSandbox/configure-persistent-volume-mounts-sandboxes)

Learn to configure persistent volume mounts for sandboxes in OpenSandbox. Easily define hostPath or pvc sources and pass them to the Sandbox.create() method for seamless data persistence.

- Tags: how-to-guide
- Published: 2026-03-08

### [BatchSandbox Runtime Architecture in Kubernetes: A Deep Dive into Alibaba OpenSandbox](/alibaba/OpenSandbox/architecture-batchsandbox-runtime-kubernetes)

Explore the BatchSandbox runtime architecture in Kubernetes. Discover its three-layer design with CRD controller and provider SDK for efficient pod management.

- Tags: architecture
- Published: 2026-03-08

### [How to Set Up API Key Authentication for the OpenSandbox Server](/alibaba/OpenSandbox/setup-api-key-authentication-opensandbox-server)

Secure your OpenSandbox server's Lifecycle API using API key authentication. Learn how to set up header validation and configure secrets for robust security.

- Tags: how-to-guide
- Published: 2026-03-08

### [Which Jupyter Kernels Are Supported by OpenSandbox for Multi-Language Code Execution](/alibaba/OpenSandbox/jupyter-kernels-supported-by-opensandbox)

OpenSandbox supports Python Java TypeScript Go and Bash kernels for secure multi-language code execution via a unified Jupyter server.

- Tags: getting-started
- Published: 2026-03-08

### [How the CodeInterpreter SDK Handles Stateful Code Execution Sessions](/alibaba/OpenSandbox/codeinterpreter-sdk-stateful-code-execution)

Explore how the CodeInterpreter SDK manages stateful code execution. Learn how REPL processes in isolated sandboxes persist variables and imports across calls for seamless development.

- Tags: internals
- Published: 2026-03-08

### [How to Implement a Custom Runtime for OpenSandbox: A 5-Step Technical Guide](/alibaba/OpenSandbox/implement-custom-runtime-opensandbox)

Learn how to implement a custom runtime for OpenSandbox in 5 clear steps. Extend RuntimeConfig, create a SandboxService subclass, implement lifecycle methods, and register your runtime.

- Tags: how-to-guide
- Published: 2026-03-08

### [How OpenSandbox Implements Execd Injection in Sandbox Containers](/alibaba/OpenSandbox/explain-execd-injection-in-sandbox-containers)

Discover how OpenSandbox implements execd injection in sandbox containers. Learn about the init container, shared volumes, and entrypoint overrides for seamless daemon integration.

- Tags: internals
- Published: 2026-03-08

### [Docker Host Mode vs Bridge Mode in OpenSandbox: Networking Architecture and Implementation](/alibaba/OpenSandbox/docker-host-vs-bridge-mode-networking-opensandbox)

Explore Docker host mode vs bridge mode in OpenSandbox. Learn how OpenSandbox uses host mode for sandbox sharing and bridge mode for multi-tenant isolation with network policies.

- Tags: deep-dive
- Published: 2026-03-08

### [How to Configure Network Egress Controls with Specific Policies for Each Sandbox in OpenSandbox](/alibaba/OpenSandbox/configure-network-egress-controls-per-sandbox)

Learn how to configure network egress controls with specific policies for each sandbox in OpenSandbox. Enforce DNS and IP rules via nftables without elevated container capabilities.

- Tags: how-to-guide
- Published: 2026-03-08

### [Secure Container Runtimes Compatible with OpenSandbox: gVisor, Kata, and Firecracker](/alibaba/OpenSandbox/opensandbox-supported-secure-container-runtimes)

Discover secure container runtimes compatible with OpenSandbox: gVisor, Kata Containers, and Firecracker. Enhance your container security today.

- Tags: tutorial
- Published: 2026-03-08

### [How OpenSandbox Manages the Full Sandbox Lifecycle: Creation, Pausing, Resuming, and Deletion](/alibaba/OpenSandbox/how-does-opensandbox-manage-sandbox-lifecycle)

Discover how OpenSandbox manages sandbox lifecycles, from creation to deletion. Learn how it controls Kubernetes containers through distinct phases with FastAPI and gRPC.

- Tags: internals
- Published: 2026-03-08