TencentCloud

CubeSandbox

TencentCloud

An instant, concurrent, secure, and lightweight sandbox service for AI agents, built on RustVMM and KVM.

v0.7.3
Published at
7d ago
12,895
Stars
771
Download
Synced at
7d ago

Latest release

v0.7.3Oct 12, 2026, 08:11 AM
Downloads slow? Switch the source anytime above

README

Project Overview

Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It is compatible with the E2B SDK and can create a hardware-isolated, fully serviceable sandbox in under 60ms with less than 5MB memory overhead.

Key Features

  • Instant startup: < 60ms sandbox creation
  • Lightweight: < 5MB memory overhead
  • Hardware isolation: Built on RustVMM and KVM
  • Kubernetes deployment: K8s deploy support
  • Snapshot & clone: CubeCoW Copy-on-Write snapshot engine

Target Audience

  • AI agent developers and platform engineers
  • Developers needing secure isolated environments
  • Cloud-native application developers

Quick Start

  1. Refer to the Quick Start guide
  2. Deploy a cluster with Terraform
  3. Create sandboxes via the E2B-compatible SDK
  4. Start running AI agents

Core Advantages

  • Instant startup (< 60ms)
  • Minimal memory overhead (< 5MB)
  • Hardware-level security isolation
  • E2B SDK compatible

System Requirements

  • OS: Linux (KVM support)
  • Architectures: x86_64, arm64
  • Additional Dependencies: KVM, Rust (for building)

Notes

  • KVM hardware virtualization support is required
  • Supports both single-node and multi-node cluster deployment

Release history

Sort