微沙盒

<a href="./#gh-dark-mode-only" target="_blank"><img height="18" src="https://octicons-col.vercel.app/package-dependencies/ffffff" alt="sdk-dark"></a><a href="./#gh-light-mode-only" target="_blank"><img height="18" src="https://octicons-col.vercel.app/package-dependencies/000000" alt="sdk"></a>&nbsp;&nbsp;SDK

The SDK lets you create and control sandboxes directly from your application. Sandbox.builder("...").create() boots a microVM as a child process. No infrastructure required.

<img height="14" src="https://octicons-col.vercel.app/play/A770EF">&nbsp;&nbsp;Run Code in a Sandbox

> import { Sandbox } from "microsandbox";
>
> await using sandbox = await Sandbox.builder("my-sandbox")
>   .image("python")
>   .cpus(1)
>   .memory(512)
>   .create();
>
> const output = await sandbox.exec("python", [
>   "-c",
>   "print('Hello from a microVM!')",
> ]);
>
> console.log(output.stdout());
> 

<details> <summary><b>&nbsp;Rust Example →</b></summary>

> use microsandbox::Sandbox;
>
> #[tokio::main]
> async fn main() -> Result<(), Box<dyn std::error::Error>> {
>     let sandbox = Sandbox::builder("my-sandbox")
>         .image("python")
>         .cpus(1)
>         .memory(512)
>         .create()
>         .await?;
>
>     let output = sandbox
>         .exec("python", ["-c", "print('Hello from a microVM!')"])
>         .await?;
>
>     println!("{}", output.stdout()?);
>
>     sandbox.stop().await?;
>
>     Ok(())
> }
> 

</details> <details> <summary><b>&nbsp;Python Example →</b></summary>

> import asyncio
> from microsandbox import Sandbox
>
> async def main():
>     sandbox = await Sandbox.create(
>         "my-sandbox",
>         image="python",
>         cpus=1,
>         memory=512,
>     )
>
>     output = await sandbox.exec("python", ["-c", "print('Hello from a microVM!')"])
>
>     print(output.stdout_text)
>
>     await sandbox.stop()
>
> asyncio.run(main())
> 

</details> <details> <summary><b>&nbsp;Ruby Example →</b></summary>

> require "microsandbox"
>
> sandbox = Microsandbox::Sandbox.create(
>   "my-sandbox",
>   image: "python",
>   cpus: 1,
>   memory: 512,
>   network: {
>     allowed_hosts: ["api.openai.com"],
>     allowed_ports: [443]
>   },
>   secrets: [{
>     env: "OPENAI_API_KEY",
>     value: ENV.fetch("OPENAI_API_KEY"),
>     allowed_host: "api.openai.com"
>   }]
> )
>
> output = sandbox.exec("python", ["-c", "print('Hello from a microVM!')"])
> puts output.stdout
>
> sandbox.stop
> 

See the Ruby SDK guide for installation, lifecycle, networking, and backend details. </details> <details> <summary><b>&nbsp;Go Example →</b></summary>

> package main
>
> import (
>     "context"
>     "fmt"
>     "log"
>
>     microsandbox "github.com/superradcompany/microsandbox/sdk/go"
> )
>
> func main() {
>     ctx := context.Background()
>
>     // Downloads the microsandbox runtime to ~/.microsandbox/ on first run.
>     if err := microsandbox.EnsureInstalled(ctx); err != nil {
>         log.Fatal(err)
>     }
>
>     sandbox, err := microsandbox.CreateSandbox(ctx, "my-sandbox",
>         microsandbox.WithImage("python"),
>         microsandbox.WithCPUs(1),
>         microsandbox.WithMemory(512),
>     )
>     if err != nil {
>         log.Fatal(err)
>     }
>     defer sandbox.Stop(ctx)
>
>     output, err := sandbox.Exec(ctx, "python", []string{"-c", "print('Hello from a microVM!')"})
>     if err != nil {
>         log.Fatal(err)
>     }
>
>     fmt.Println(output.Stdout())
> }
> 

</details>

The first call to create() pulls the image if it isn't cached locally, so it may take longer depending on your connection. Subsequent runs reuse the cache.

<br />

<a href="https://docs.microsandbox.dev/sdk/overview"><img src="https://img.shields.io/badge/SDK_Docs-%E2%86%92-A770EF?style=flat-square&labelColor=2b2b2b" alt="SDK Docs"></a>

<br />

<a href="./#gh-dark-mode-only" target="_blank"><img height="13" src="https://octicons-col.vercel.app/rocket/ffffff" alt="rocket-dark"></a><a href="./#gh-light-mode-only" target="_blank"><img height="13" src="https://octicons-col.vercel.app/rocket/000000" alt="rocket"></a>&nbsp;&nbsp;Getting Started

#### <img height="14" src="https://octicons-col.vercel.app/move-to-bottom/A770EF">&nbsp;&nbsp;Install the SDK >

> npm i microsandbox                                       # 🟦 TypeScript
> 

> cargo add microsandbox                                   # 🦀 Rust
> 

> uv add microsandbox                                      # 🐍 Python
> 

> go get github.com/superradcompany/microsandbox/sdk/go    # 🐹 Go
> 

Boot a microVM in a single command:

> npx microsandbox run debian
> 

## Or install the msb command globally:

> curl -fsSL https://install.microsandbox.dev | sh        # 🍎 macOS / 🐧 Linux
> 

> irm https://install.microsandbox.dev/windows | iex      # 🪟 Windows
> 

<details> <summary><em>&nbsp;We also support other package managers →</em></summary> ##

> brew install superradcompany/tap/microsandbox
> 

> npm i -g microsandbox
> 

> uv tool install microsandbox
> 

> cargo install microsandbox
> 

</details> ## Then you can run msb directly:

> msb run debian
> 

##

Requirements: - <img height="14" src="https://api.iconify.design/simple-icons:apple.svg?color=%23A770EF" alt="macOS"> macOS: Apple Silicon. - <img height="14" src="https://api.iconify.design/simple-icons:linux.svg?color=%23A770EF" alt="Linux"> Linux: KVM enabled. - <img height="14" src="https://api.iconify.design/simple-icons:windows.svg?color=%23A770EF" alt="Windows"> Windows: WHP enabled. Warning: Microsandbox is still beta software. Expect breaking changes, missing features, and rough edges.

<br />

<a href="./#gh-dark-mode-only" target="_blank"><img height="18" src="https://octicons-col.vercel.app/beaker/ffffff" alt="beaker-dark"></a><a href="./#gh-light-mode-only" target="_blank"><img height="18" src="https://octicons-col.vercel.app/beaker/000000" alt="beaker"></a>&nbsp;&nbsp;Examples

Practical ways to put microsandbox to work:

• <img height="14" src="https://octicons-col.vercel.app/container/A770EF"> Docker in a Sandbox: Run Docker without touching the host daemon.<br /> • <img height="14" src="https://octicons-col.vercel.app/code/A770EF"> OpenCode: Give a coding agent an isolated project workspace.<br /> • <img height="14" src="https://octicons-col.vercel.app/globe/A770EF"> Playwright: Run headless browser jobs inside a microVM.<br /> • <img height="14" src="https://octicons-col.vercel.app/cache/A770EF"> Warm Workers: Snapshot a toolchain and launch clean workers.<br /> • <img height="14" src="https://octicons-col.vercel.app/database/A770EF"> Migration Rehearsal: Test a database migration, then restore the baseline.<br /> • <img height="14" src="https://octicons-col.vercel.app/workflow/A770EF"> GitHub Actions Runner: Run each self-hosted job in a disposable microVM.<br /> • <img height="14" src="https://octicons-col.vercel.app/file/A770EF"> Documents to PDF: Convert untrusted documents in a fresh offline worker.

<br />

<a href="https://docs.microsandbox.dev/examples/overview"><img src="https://img.shields.io/badge/Browse_Examples-%E2%86%92-A770EF?style=flat-square&labelColor=2b2b2b" alt="Browse Examples"></a>

<br />

<a href="./#gh-dark-mode-only" target="_blank"><img height="18" src="https://octicons-col.vercel.app/people/ffffff" alt="people-dark"></a><a href="./#gh-light-mode-only" target="_blank"><img height="18" src="https://octicons-col.vercel.app/people/000000" alt="people"></a>&nbsp;&nbsp;Community Showcase

<img height="14" src="https://octicons-col.vercel.app/hubot/A770EF">&nbsp;&nbsp;Agent frameworks & runtimes

• <img height="14" src="https://octicons-col.vercel.app/workflow/A770EF"> Eve by Vercel: Agent framework that ships microsandbox as a sandbox backend.<br /> • <img height="14" src="https://octicons-col.vercel.app/organization/A770EF"> Agentic Coding Quickstart by U.S. GSA: From zero to a running AI coding agent with USAi in minutes.<br /> • <img height="14" src="https://octicons-col.vercel.app/package/A770EF"> Condukt and Once by Tuist: Elixir agentic engine, and cacheable actions that run in fresh sandboxes.<br /> • <img height="14" src="https://octicons-col.vercel.app/link/A770EF"> langchain-microsandbox by kenwoodjw: Microsandbox integration for LangChain Deep Agents.<br /> • <img height="14" src="https://octicons-col.vercel.app/history/A770EF"> Smithers by Smithers: Agent workflows with full observability, rewind, fork, and replay.<br /> • <img height="14" src="https://octicons-col.vercel.app/terminal/A770EF"> wrap by Tobi Lütke: Run coding agents and project commands in isolated Arch Linux microVMs.<br /> • <img height="14" src="https://octicons-col.vercel.app/shield-lock/A770EF"> Agent VM by Wiren Board: Run AI agents in safe VMs scoped to a local folder.

<img height="14" src="https://octicons-col.vercel.app/cpu/A770EF">&nbsp;&nbsp;Tools & infrastructure

• <img height="14" src="https://octicons-col.vercel.app/browser/A770EF"> h5i by h5i: Secure, auditable browser for AI agents, written in pure Rust.<br /> • <img height="14" src="https://octicons-col.vercel.app/cloud/A770EF"> Devsy by Devsy: Deploy devcontainers onto any cloud, Kubernetes cluster, or Docker host.<br /> • <img height="14" src="https://octicons-col.vercel.app/briefcase/A770EF"> OpenWork by Different AI: Open-source Claude Cowork alternative with a microsandbox image.

<img height="14" src="https://octicons-col.vercel.app/list-unordered/A770EF">&nbsp;&nbsp;Guides & showcases

• <img height="14" src="https://octicons-col.vercel.app/list-unordered/A770EF"> Awesome Microsandbox by ya-luotao: Curated list of SDKs, integrations, tools, and resources.<br /> • <img height="14" src="https://octicons-col.vercel.app/device-desktop/A770EF"> msb-omarchy by ya-luotao: Omarchy desktop with graphics inside a microVM on Apple Silicon.

<br />

<a href="https://discord.gg/T95Y3XnEAK"><img src="https://img.shields.io/badge/Share_a_Project-%E2%86%92-A770EF?style=flat-square&labelColor=2b2b2b" alt="Share a Project"></a>

<br />