# mxc | Microsoft | Knowledge Base | Instagit

Policy-driven, layered isolation and containment 

GitHub Stars: 706

Repository: https://github.com/microsoft/mxc

---

## Articles

### [How to Configure the LXC Backend in Microsoft MXC: Complete Setup Guide](/microsoft/mxc/how-to-configure-lxc-backend-in-mxc)

Configure the LXC backend in Microsoft MXC by setting containment to lxc and defining your container's distribution and release. Get the complete setup guide here.

- Tags: how-to-guide
- Published: 2026-06-07

### [How MXC Recovers Orphaned DACL State: Crash-Safe ACL Restoration](/microsoft/mxc/how-does-mxc-recover-orphaned-dacl-state)

Learn how MXC recovers orphaned DACL state by scanning crash-safe JSON files, verifying process liveness, and reverting ACLs for terminated processes ensuring secure sandbox operations.

- Tags: internals
- Published: 2026-06-07

### [MXC Schema Version Differences: Comparing 0.5.0-alpha, 0.6.0-alpha, and 0.7.0-dev](/microsoft/mxc/mxc-schema-version-differences-0-5-0-alpha-0-6-0-alpha-0-7-0-dev)

Explore MXC schema version differences from 0.5.0-alpha to 0.7.0-dev. Understand changes in process abstraction, network defaults, and experimental backend support.

- Tags: api-reference
- Published: 2026-06-07

### [How the Bubblewrap Backend Uses User Namespaces for Linux Sandboxing](/microsoft/mxc/how-does-bubblewrap-backend-use-user-namespaces-linux-sandboxing)

Discover how Bubblewrap creates unprivileged Linux sandboxes using user namespaces for isolated user, PID, IPC, and UTS environments without root access. Learn more about the microsoft/mxc repository.

- Tags: deep-dive
- Published: 2026-06-07

### [How to Use MXC CLI Command Override: A Complete Guide to Overriding Policy Commands](/microsoft/mxc/how-to-use-mxc-cli-command-override)

Learn how to use MXC CLI command override with wxc-exec. Easily replace policy commands by providing arguments after the -- separator. Master MXC command overrides today.

- Tags: how-to-guide
- Published: 2026-06-07

### [MXC Network Allow/Block List Filtering for Outbound Connections: A Complete Guide](/microsoft/mxc/mxc-network-allow-block-list-filtering-outbound-connections)

Master MXC network allow/block list filtering for outbound connections. This guide details how the MXC SDK utilizes the SandboxPolicy.network object to enforce rules across Windows Linux and macOS.

- Tags: how-to-guide
- Published: 2026-06-07

### [How to Configure UI Policies in MXC: A Complete Guide](/microsoft/mxc/how-to-configure-ui-policies-in-mxc)

Configure MXC UI policies for granular control over window creation, clipboard access, and input injection using the ui block in SandboxPolicy. Learn to manage these settings effectively.

- Tags: how-to-guide
- Published: 2026-06-07

### [How the `--probe` Flag Enables Platform Capability Detection in Microsoft MXC](/microsoft/mxc/how-does-probe-flag-work-platform-capability-detection)

Discover how the --probe flag in Microsoft MXC detects platform capabilities. Learn how it emits a JSON doc detailing sandbox features, kernel version, and job limits for efficient system analysis.

- Tags: how-to-guide
- Published: 2026-06-07

### [NanVix MicroVM vs Hyperlight Backends: Isolation Strategies in Microsoft MXC](/microsoft/mxc/differences-nanvix-microvm-hyperlight-backends)

Explore NanVix MicroVM vs Hyperlight backends in Microsoft MXC. Understand isolation strategies and discover how NanVix uses Hypervisor Platform and Hyperlight runs in-process Unikernel for faster startup.

- Tags: deep-dive
- Published: 2026-06-07

### [How MXC Handles Ctrl-C Signals for Graceful Container Shutdown](/microsoft/mxc/how-does-mxc-handle-ctrl-c-signals-graceful-shutdown)

Discover how MXC gracefully handles Ctrl-C signals. Learn about its watchdog thread, signal handling, and iptables cleanup for safe container shutdowns.

- Tags: internals
- Published: 2026-06-07

### [MXC macOS GUI Access Options with Seatbelt Backend: Configuration Guide](/microsoft/mxc/mxc-macos-gui-access-options-seatbelt-backend)

Configure MXC macOS GUI access with the Seatbelt backend. Learn how to enable GUI access by setting experimental.seatbelt.guiAccess to true for enhanced sandbox profiles.

- Tags: how-to-guide
- Published: 2026-06-07

### [How the Seatbelt Backend Generates TinyScheme Profiles in MXC](/microsoft/mxc/how-does-seatbelt-backend-generate-tinyscheme-profiles)

Discover how the Seatbelt backend generates TinyScheme profiles dynamically using the build_profile function in MXC. Learn about layered rules and Apple's sandbox_init API.

- Tags: how-to-guide
- Published: 2026-06-07

### [How to Configure the WSLC Backend in MXC: Complete Setup Guide](/microsoft/mxc/how-to-configure-wslc-backend-in-mxc)

Learn how to configure the WSLC backend in MXC. Follow our guide to compile with the wslc feature, set up the SDK, and execute with the experimental flag for seamless integration. Get started today.

- Tags: how-to-guide
- Published: 2026-06-07

### [MXC TypeScript SDK: One-Shot vs State-Aware API Patterns](/microsoft/mxc/mxc-typescript-sdk-one-shot-vs-state-aware-api-patterns)

Explore the MXC TypeScript SDK's one-shot vs state-aware API patterns. Understand how to choose the right model for your sandbox execution needs. Maximize efficiency with the right API choice.

- Tags: deep-dive
- Published: 2026-06-07

### [How MXC's Fallback Policy Works When the BaseContainer API Is Unavailable](/microsoft/mxc/how-does-mxc-fallback-policy-work-when-basecontainer-api-unavailable)

Discover how MXC's fallback policy activates when BaseContainer API is unavailable. Learn how it creates a sandbox container using environment variables and PATH directories for continued operation.

- Tags: how-to-guide
- Published: 2026-06-07

### [How to Enable and Configure the Windows Sandbox Backend in Microsoft MXC](/microsoft/mxc/how-to-enable-and-configure-windows-sandbox-backend)

Learn to enable and configure the Windows Sandbox backend in Microsoft MXC. Follow simple steps to set containment, enable the feature, and execute scripts for enhanced security and testing.

- Tags: tutorial
- Published: 2026-06-07

### [How the Isolation Session Backend Uses Entra Cloud-Agent Credentials in Microsoft MXC](/microsoft/mxc/how-does-isolation-session-backend-use-entra-cloud-agent-credentials)

Learn how the Isolation Session backend uses Entra cloud-agent credentials with Microsoft MXC. Discover how UPN and WAM tokens provision identity-specific users for isolated sessions.

- Tags: how-to-guide
- Published: 2026-06-07

### [Difference Between Network Proxy and Network Enforcement Modes in MXC](/microsoft/mxc/difference-between-network-proxy-and-network-enforcement-modes-in-mxc)

Understand the key differences between MXC network proxy mode (user-space HTTP proxy) and network enforcement mode (kernel-level restrictions) for effective network control.

- Tags: deep-dive
- Published: 2026-06-07

### [How to Configure Filesystem Policies in MXC: A Complete Developer Guide](/microsoft/mxc/how-to-configure-filesystem-policies-in-mxc)

Configure MXC filesystem policies by defining SandboxPolicy objects with readwrite, readonly, and denied paths. Learn how to use spawnSandbox and createConfigFromPolicy for secure container execution.

- Tags: how-to-guide
- Published: 2026-06-07

### [How MXC Handles DACL Cleanup on Windows: Crash-Safe DACL Restoration](/microsoft/mxc/how-does-mxc-handle-dacl-cleanup-on-windows)

Learn how MXC ensures crash-safe DACL cleanup on Windows. Discover its multi-layered strategy for removing temporary ACEs during normal exits, panics, signals, and TerminateProcess.

- Tags: deep-dive
- Published: 2026-06-07

### [How MXC's State-Aware Sandbox Lifecycle Works: The 5-Phase Architecture Explained](/microsoft/mxc/how-does-mxc-state-aware-sandbox-lifecycle-work)

Explore MXC's state-aware sandbox lifecycle with its 5-phase architecture. Learn how provision, start, exec, stop, and deprovision offer granular control for efficient sandbox management.

- Tags: architecture
- Published: 2026-06-07