https://cybertoolchain.io/tools/cubesandbox New releases and features in CubeSandbox, tracked by The Cyber Toolchain. en Thu, 24 Sep 2026 06:20:45 GMT https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.7.2 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.7.2 Thu, 24 Sep 2026 06:20:45 GMT CubeSandbox v0.7.2 adds JuiceFS volume plugin, idle guest memory reclaim, cross-node S3 restore cache, and `sandbox.connect` timeout parameter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `timeout` parameter to `sandbox.connect` to control connection deadlines (#1352).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `cubeNode.network.mtu` config key to pin guest MTU when node uplink NIC MTU cannot be auto-detected (#1674). • Adds `hostNetworkChangeAck` confirmation flag required when switching an existing cluster to host-network mode for cube-node Pods (#1815). • Adds JuiceFS storage plugin so sandboxes can mount a JuiceFS filesystem as a persistent volume with full POSIX semantics. • Adds automatic reclaim of idle guest memory back to the host, allowing a single node to host more sandboxes. • Adds whole-object local S3 cache for cross-node restore reads so repeated reads and re-imports of the same snapshot hit the local cache instead of S3. • Enables cube-node to run on the host network by default in K8s deployments, keeping sandbox network namespaces alive across Pod restarts (#1815). • Allows Cubelet to configure the template install path so large templates can be moved to the data disk (#1675). • Extends component repository and template artifact storage to support S3, local disk, PVC, and NFS backends (#1749). • Enables the Python SDK `run_code` (E2B-compatible code-interpreter interface) to read environment variables injected at sandbox creation (#1323). Breaking changes: • cube-node now runs on the host network by default in K8s deployments; switching an existing cluster requires draining compute nodes and passing explicit `hostNetworkChangeAck` confirmation — without this, the migration cannot proceed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.7.1 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.7.1 Fri, 11 Sep 2026 09:51:11 GMT CubeSandbox v0.7.1 adds HA control-plane, S3-backed templates, K8s S3 volumes, external PostgreSQL, and virtiofsd hardening.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables `CUBE_DATABASE_DRIVER` to select MySQL or PostgreSQL and connect one-click deployments to a self-managed database instance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `[cow.s3] enable = true` config key (or `ONE_CLICK_ENABLE_S3LVOL=1` env var) to opt in to the CubeS3lvol S3 backend for cross-node pause/resume and snapshots; disabled by default. • Adds new top-level `redis.db` Helm config key applied to CubeMaster, CubeProxy, and CLM so multiple clusters sharing one Redis instance can isolate logical databases per cluster. • Adds `tpl delete` subcommand to `cubemastercli` accepting multiple template IDs in a single batch deletion call. • Introduces standalone CubeTemplateCenter service that splits template build, delete, and reclaim out of CubeMaster into an independently scalable multi-replica service, persisting build artifacts to S3/MinIO (AWS S3-compatible storage). • Adds CubeS3lvol support on Kubernetes for cross-node pause/resume and snapshots in K8s deployments. • Adds snapshot support (snapshot, restore, rollback, and clone) for sandboxes with Host Mount and Volume Plugin external mounts. • Enables same-bucket cross-node snapshot restore via object-storage server-side copy, adding snapshot cancellation and improved delayed-delete reclamation. • Adds virtiofsd hardening that rejects root-directory mutation operations and forged readdirplus requests after a directory whitelist is configured. • Supports active/standby disaster recovery for the lifecycle management service (CLM). • Allows deleting a still-referenced snapshot immediately, with underlying storage reclaimed after the last reference is released. Breaking changes: • Nodes that were using the S3 backend without an explicit setting must set `[cow.s3] enable = true` (or `ONE_CLICK_ENABLE_S3LVOL=1`) after upgrading, or the S3 volume will be disabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.7.0 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.7.0 Fri, 28 Aug 2026 07:45:07 GMT CubeSandbox v0.7.0 adds cross-node pause/resume, component multi-versioning, a network subsystem refactor, and a new CubeOps control plane split • Adds `CubeProxy` support for a custom management port and the gRPC protocol. • Adds `Files.ForUser` to the Go SDK to isolate file access by user identity. • Adds Sandbox.setTimeout(timeout) to the Node SDK with support for `NEVER_TIMEOUT`. • Adds Sandbox.create(distribution_scope=...) to the Python SDK to explicitly specify the nodes/zones a sandbox can be placed on. • Adds Volume CRUD and `volumeMounts` to the Go and Node SDKs, bringing all three languages to parity with Python. • Adds full template alias support (build-time aliases and alias management for existing templates) across Go, Node, and Python SDKs. • Adds configurable log rotation policy for Cubelet via the configuration file. • Introduces cross-node pause/resume and snapshot cloning with an S3 backend (preview), backed by the new CubeS3lvol COW engine for remote snapshot storage on S3 object storage. • Introduces component multi-versioning so that templates and snapshots record their component dependency versions, allowing historical templates and snapshots to remain usable after compute-node component upgrades. • Introduces `CubeOps` module with multi-replica deployment support, taking over node management from CubeMaster; ships the `cubeopscli` tool for node management, replacing the `cubemastercli` node subcommands. • Merges NetworkAgent fully into Cubelet, reducing inter-process RPC calls during sandbox creation and preventing network rules from leaking across sandboxes. • Optimizes the eBPF network policy provisioning path to significantly reduce sandbox creation latency for sandboxes with network rules. • Supports dynamically updating network policies for running sandboxes. • Adds support for `CubeEgress` L7 forwarding rules with custom ports. • Adds CubeVS MAC address learning within the same subnet to avoid black-holed traffic in non-hairpin networks. • Supports pulling images from HTTP (private) image registries to build templates. • Deploys MinIO by default as the S3 backend for the volume feature and cross-node pause/resume, with the option to specify a custom S3 backend. • Adds node deletion support so a node can be removed from the cluster and excluded from scheduling. • Adds node isolation/unisolation and node operation history viewing to the Web UI. • Publishes kernel and guest images as separate artifacts under dedicated `kernel-release-*` and `guest-image-*` releases. Breaking changes: • Node management subcommands previously in `cubemastercli` are replaced by `cubeopscli`; existing scripts using `cubemastercli` node subcommands will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.6.0 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.6.0 Fri, 24 Jul 2026 08:14:00 GMT CubeSandbox v0.6.0 adds Kubernetes deployment, E2B-compatible volumes, template aliases, configurable Host headers, and node isolation. • Deploy CubeSandbox control-plane and compute nodes on TKE, standard Kubernetes, or k3s via Helm Chart, with support for rolling upgrades and canary releases. • New E2B-compatible Volume framework lets operators plug in custom backend storage via Binary or RPC plugins, with Create/Destroy/Attach/Detach lifecycle hooks and sandbox–Volume binding APIs. • Template aliases can be set at creation time, allowing sandboxes to be launched by alias name instead of template ID. • New `network.maskRequestHost` parameter lets operators configure the `Host` header forwarded into a sandbox (e.g. `localhost:${PORT}`), improving compatibility with Host-based routing inside sandboxes. • New compute node isolation commands (`cubemastercli node isolate` / `unisolate`) let operators drain a node for maintenance without disturbing running sandboxes. • CubeOps is now a standalone service decoupled from CubeAPI, making the control-plane API layer lighter and more extensible. • CubeMaster DAO layer now supports PostgreSQL as a metadata backend. • New `CUBE_AUTO_MIGRATION` environment variable allows skipping automatic DB schema migration at startup for controlled upgrade workflows. • Support deleting sandboxes that are in the paused state. • In-sandbox cgroup switches from v1 to v2. • CubeEgress MITM now writes subjectAltName on leaf certificates for broader TLS verification compatibility. • New `cubemastercli` volume-related subcommands added alongside Volume framework support. • Templates can now enable the ivshmem device. • Cubelet state tmpfs supports dynamic expansion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.5.1 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.5.1 Sat, 11 Jul 2026 06:33:59 GMT CubeSandbox v0.5.1 adds a standalone lifecycle manager, three-value timeout semantics, host-mount allowlisting, and a Node.js SDK preview. • Introduces cube-lifecycle-manager (CLM), a standalone control-plane service extracted from the CubeProxy sidecar, enabling CubeProxy to scale horizontally with Redis-based replica discovery and coordinated auto-pause/resume. • Adds three-value timeout semantics: omitted inherits cluster default, `NEVER_TIMEOUT` (-1) disables idle reclaim, `0` triggers immediate reclaim, and N>0 sets an idle TTL in seconds — with server-side defaults in CubeMaster. • Adds set_timeout() / SetTimeout() to Python and Go SDKs (including `NEVER_TIMEOUT` sentinel) and exposes timeout on sandbox create in the Web UI. • Adds host-mount path allowlisting: bind-mounts are restricted to configurable prefixes (default `/data/shared/`) with `filepath.Clean` traversal neutralization; `/` is explicitly forbidden. • Adds Node.js / TypeScript SDK preview (`@cubesandbox/sdk`) aligned with the Python and Go surface. • Supports CubeEgress credential injection against plain HTTP upstreams (not only TLS). • Adds minimum TTL clamping (≥300s) for DNS-learned egress allow entries to prevent reconnect denials on short DNS TTLs. • Skips egress policy re-evaluation for established TCP sessions in CubeVS, preventing DNS expiry from breaking live connections. • Publishes pre-built multi-arch CubeProxy images to TCR with `MIRROR=cn|int` selection and airgap local-cache fallback, eliminating on-host builds. • Decouples RPC scheduling deadline (`create_timeout_insec`, default 300s) from sandbox idle TTL in CubeMaster. • Adds TencentCloud Terraform support for multi-replica CubeProxy (`TENCENTCLOUD_CUBE_PROXY_REPLICAS`) with CLM replica count, discovery refresh interval, and admin token configuration. • Adds optional dnsmasq fallback in one-click installer for environments where systemd-resolved and NetworkManager's dnsmasq plugin are absent, restoring `cube.app` resolution. Breaking changes: • Host-mount paths are now restricted to configurable prefixes (default `/data/shared/`); previously any absolute path was accepted, so existing sandboxes using host bind-mounts outside the allowed prefix will be rejected. • Go and Python SDK `CreateOptions.Timeout` (and equivalent fields) are now optional pointers; code that relied on the SDK injecting a hard-coded default timeout will no longer receive that default — the cluster `default_timeout_insec` is used instead, or never-timeout if unset. • The `cube-proxy-sidecar` in-image AutoPause coordinator has been extracted into a standalone `cube-lifecycle-manager` service; deployments that relied on the sidecar for AutoPause coordination must now deploy the separate CLM service. • CubeEgress transparent-proxy listen address is no longer hard-coded to `192.168.0.1`; it is now derived from `CUBE_SANDBOX_NETWORK_CIDR`, so deployments using custom sandbox network CIDRs will get a different TPROXY/OpenResty listen address. • Go SDK `envd` RPCs (commands, files, filesystem, PTY) now route to port 49983 instead of port 49999; integrations that hard-coded port 49999 for these operations will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.4.0 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.4.0 Mon, 15 Jun 2026 12:32:51 GMT CubeSandbox v0.4.0 adds CubeEgress security proxy, container log forwarding, node version matrix, and daemonless image builds. • Adds CubeEgress, an OpenResty-based egress security proxy that enforces L7 policy via TPROXY, supporting credential injection, domain filtering, and structured access auditing for sandbox outbound traffic. • Adds per-sandbox credential injection at the proxy layer via `EgressRule.inject`, so user code inside the sandbox never handles raw credentials; credential material is redacted as `***REDACTED***` in safe-log output. • Adds policy-driven domain allow/deny filtering for sandbox egress, evaluated first-match-wins against L7 requests, with DNS queries permitted even when domain-based allow-out rules are set. • Adds structured JSON egress access logs with optional body redaction via a `redactor` Lua module for downstream compliance review. • Adds container log forwarding: init-process stdout/stderr is streamed from the agent to the shim via a dedicated vsock connection and appended to host-side log files. • Adds `cubecli cubebox logs` subcommand to read container stdout/stderr from outside the sandbox, with `--tail N`, `--head N`, `--all`, and `--stderr` flags. • Adds a node component version matrix that gives operators cluster-wide visibility of component versions (guest-image, cube-agent, kernel, control-plane) with version-skew surfacing via CubeAPI and a new Web UI Versions page. • Adds standardized build-time version metadata injection (version, commit, build time) to all Go and Rust binaries via ldflags/`build.rs`, plus a machine-readable `release-manifest.json` in release bundles. • Adds template replica compatibility checking: component versions bound to a template are compared against what each node reports, with results exposed via `/templates/compat` and `/templates/compat/{id}` endpoints and per-replica compatibility badges in the Web UI. • Adds a daemonless template image build pipeline using skopeo/umoci, reducing peak disk usage by 72% (from ~4.2× to ~1.2× image size), with fallback to Docker for backward compatibility. • Adds `CUBEMASTER_DISK_SPACE_SAFETY_MARGIN` configurable safety margin for a fail-fast disk-space pre-check before template image builds. • Adds `CUBEMASTER_LOOP_MOUNT_EXT4_ENABLED` flag (default false) to enable a loop-mount streaming ext4 build phase with `CAP_SYS_ADMIN` detection. • Adds a three-tier `GetTapFile` strategy (fast/hot/recovery paths) delivering 35% faster network P50 (35.3→23.1 ms) and 41% faster P99 (86.6→51.2 ms), plus 8% higher throughput. • Adds a `--pprof-listen` flag to the network agent for on-demand pprof profiling. • Adds `CubeEgress /admin/v1/health` endpoint extension and integrates CubeEgress version reporting into the node component version matrix. • Adds CubeAPI `POST /templates` and Python/Go SDK support for DNS, egress CIDRs, registry auth, command/args, network type, and node scope options, matching the full `cubemastercli template create-from-image` option set. • Adds SYN-only packet rejection in the CubeVS port-mapping BPF fast path to prevent guest-initiated connections from bypassing egress policy. • Enables TX checksum/TSO offload and `tx-tcp-mangleid-segmentation` on TAP devices so redirected packets skip GSO before reaching the guest. • Supports CubeEgress deployment on kernel v5.4+, expanding deployment coverage. Breaking changes: • The `CubeNetworkConfig` protobuf message is renamed from `CubeVSContext`; any integration referencing the old message name will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.3.1 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.3.1 Thu, 04 Jun 2026 07:28:55 GMT CubeSandbox v0.3.1 adds custom network CIDR config, glibc/PVM preflight checks, and snapshot/rollback API routes in AgentHub. • Supports `CUBE_SANDBOX_NETWORK_CIDR` at install time to specify a custom sandbox network CIDR, with format validation, host interface/route overlap detection, and an optional conflict-check bypass flag. • Adds glibc >= 2.34 preflight check during installation to fail fast on unsupported distributions before cubelet/cubecli binaries crash at runtime. • Adds PVM consistency pre-check: when `kvm_pvm` is loaded, the installer verifies `CUBE_PVM_ENABLE=1` is set, preventing silent installation of the wrong guest kernel. • Adds snapshot creation and rollback API endpoints to AgentHub, enabling the digital assistant console to manage sandbox checkpoints. • New preview button and sandbox open logic in the AgentHub WebUI, with template store defaults corrected. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.3.0 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.3.0 Tue, 02 Jun 2026 07:12:25 GMT CubeSandbox v0.3.0 ships CubeCoW snapshot engine, AgentHub console, Web UI, and a new Go SDK for sandbox management. • Adds CubeCoW Copy-on-Write snapshot engine with reflink-based volume snapshots for lightweight, space-efficient checkpoints of AI Agent sandboxes. • Adds soft-dirty incremental memory snapshots that capture only dirty pages after the first full snapshot, dramatically reducing snapshot time and storage. • Adds AgentHub digital assistant console (Preview) with snapshot timelines, visual checkpoint creation and rollback, parallel clone environments, template actions, and WeCom notification configuration. • Adds browser-accessible Web UI management dashboard for sandboxes, templates, and cluster nodes — including a template store for deploying pre-built images. • Adds initial Go SDK providing typed API bindings for sandbox lifecycle management (create, manage, destroy). • Adds Python SDK template creation API for programmatic sandbox template creation without shell commands. • Adds systemd-based one-click deployment with service supervision and automatic restart on failure. • Adds `check.sh` and `collect-logs.sh` health check and diagnostic scripts for one-click deployment environments. • Adds cgroup v2 CPU controller preflight check in the installer with actionable guidance when support is missing. • Adds Prometheus scheduler metrics exposed as gauges on `/v1/metrics` via Cubelet for real-time monitoring. • Adds node resource reporting (CPU, memory, disk) from Cubelet to CubeMaster for cluster-wide resource awareness. • Adds path-based sandbox routing and shared backend resolution in CubeProxy. • Adds centralized database schema migration via `goose` in CubeMaster for versioned, automated schema management. • Adds early network connectivity and disk space validation in the online installer before downloading begins. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.2.2 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.2.2 Mon, 18 May 2026 08:13:00 GMT CubeSandbox v0.2.2 adds configurable storage timeouts, richer ext4 diagnostics, E2B-compatible default port, and AI-powered PR review automation. • Changes the default sandbox exposed port to 49983 to match the E2B sandbox protocol, with CubeMaster as the single authoritative source of default exposed ports. • Adds an optional `cmd_timeout` field in the storage plugin TOML config so operators can raise the cubelet command timeout beyond the previous hardcoded 3 s limit without recompiling. • Adds richer failure diagnostics for `newExt4RawByReflinkCopy`, including elapsed time, target/base file sizes, and free space in structured log output. • Adds `__CUBE_SANDBOX_MYSQL_PORT__` and `__CUBE_SANDBOX_REDIS_PORT__` placeholders to `cubemaster.yaml`, substituted by `install.sh` from `.env` to support non-default MySQL/Redis ports. • Introduces five AI reviewer agents (code quality, performance, security, test coverage, documentation accuracy) with automated PR review, duplicate issue detection, and issue label triage workflows. • Adds `comment-issue` subcommand to `gh.sh` for posting issue comments via stdin heredoc. • Documents network port allocation ranges (10000–19999, 20000–29999, 30000–65535) in `docs/architecture/network.md` (EN & ZH). • Adds new bilingual community doc sections for troubleshooting, use-cases, and integrations in VitePress, with a GitHub Actions workflow enforcing bilingual parity. Breaking changes: • The default sandbox exposed port is changed from 8080/32000 to 49983; any client or firewall rule targeting the old default ports will stop working after upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.2.1 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.2.1 Thu, 14 May 2026 10:41:30 GMT CubeSandbox v0.2.1 ships a first-party Python SDK, faster startup via skipped SHA256 checks, and improved template-watch CLI output. • Adds official Python SDK (`cubesandbox` v0.1.0) with full sandbox lifecycle methods (`create`, `connect`, `pause`, `kill`, `list`, `health`), streaming code execution via run_code(), and filesystem access via files.read(). • Supports `allow_internet_access` and explicit allow/deny network policy lists as first-class parameters in the Python SDK. • Supports `CUBE_PROXY_NODE_IP` for TCP direct-connect transport via `IPOverrideTransport`, bypassing DNS in the Python SDK. • New `EnsureKernelFilePresent` (copy-if-missing fast path) and `RefreshKernelFile` (force-refresh with verification) split in Cubelet dramatically reduces startup latency on hosts with many templates by skipping per-boot SHA256 checks. • Skips redundant `docker pull` in CubeMaster when the source image already exists locally, removing unnecessary registry round-trips during template builds. • New `cubemastercli tpl watch` phase-oriented output replaces full-status dumps with concise `[N/7] PHASE progress=… distribution=…` lines, also applied to the `redo` watch path. • Adds 12 worked examples and a `benchmark.py` for concurrent create/delete performance testing in the Python SDK. • Promotes `cube-bench` to a standalone Go module at `examples/cube-bench` with its own Makefile. • Adds DCO check CI workflow that blocks PR merges on missing `Signed-off-by` trailers. • Adds GitHub ARC (Actions Runner Controller) support for kernel and package build workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.2.0 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.2.0 Thu, 07 May 2026 07:52:12 GMT CubeSandbox v0.2.0 adds a Web Management Console and PVM deployment mode so sandboxes run on ordinary cloud servers. • New Web Management Console (Dashboard) with cluster overview, node/sandbox status, template management, and API key management, backed by new CubeAPI web endpoints. • New PVM (Pagetable-based Virtual Machine) deployment mode lets ordinary cloud servers run CubeSandbox without bare-metal or nested virtualization. • Adds `--dns` flag to `cubemastercli template` for specifying a custom DNS server address when creating a template image. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.1.1 https://github.com/TencentCloud/CubeSandbox/releases/tag/v0.1.1 Fri, 24 Apr 2026 06:36:36 GMT CubeSandbox v0.1.1 adds a base container image, QEMU dev environment, CubeProxy HTTP/HTTPS port forwarding, and a cubebox destroy CLI tool. • Adds CubeSandbox base image and entrypoint script for containerized sandbox deployments. • Adds QEMU-based development environment for OpenCloudOS 9, enabling local sandbox development without cloud infrastructure. • Adds CubeProxy HTTP/HTTPS port forwarding with a dev-sidecar example for proxying traffic into sandboxes. • Adds `cubebox destroy` CLI tool to the cubemaster for tearing down sandbox instances. • Adds China mainland CDN mirror support for faster binary downloads in mainland China regions. • Adds dev-environment scripts for syncing binaries, collecting logs, and managing autostart. • Adds OpenAI Agents SDK integration examples demonstrating CubeSandbox as a code execution backend. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cubesandbox