server 0.1.7

What's New

✨ Features

• refactor kubernetes client service and add rate limter (#429)
• add pvc support in agent-sandbox/batchsandbox runtime (#424)
• support user-defined Docker network stack (#426)
• add server rbac for secrets (#396)
• support image auth in batchsandbox provider (#395)

🐛 Bug Fixes

• clean up failed egress sidecar startup (#418)
• strip hop-by-hop proxy headers (#408)
• currect Kubernetes label key validation (#398)
• use internal endpoint resolution for server proxy mode (#404)
• clean up container when runtime prep fails (#394)

👥 Contributors

Thanks to these contributors ❤️

• @Generalwin
• @Gujiassh
• @Spground
• @ctlaltlaltc
• @zerone0x
• @suger-m
• @jinghuan-Chen

---

• PyPI: opensandbox-server==0.1.7
• Docker Hub: opensandbox/server:v0.1.7
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.7

components/ingress 1.0.4

What's New

🐛 Bug Fixes

• set CGO_ENABLED=0 resolve ELF 64-bit LSB executable, x86-64, dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2 error (#436)

👥 Contributors

Thanks to these contributors ❤️

• @Pangjiping

---

• Docker Hub: opensandbox/ingress:v1.0.4
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.4

components/egress 1.0.3

What's New

✨ Features

• add denied hostname webhook fanout (#406)
• add sandboxID within deny webhook payload (#427)

📦 Misc

• install network tools, like ip (#427)
• refactor test by testify framework (#427)

👥 Contributors

Thanks to these contributors ❤️

• @Pangjiping

---

• Docker Hub: opensandbox/egress:v1.0.3
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.3

components/egress 1.0.2

What's New

✨ Features

• add patch policy updates and somke coverage (#392)
• add nameserver exempt for direct DNS forwarding (#356)

📦 Misc

• sync latest image for v-prefixed TAG (#331)
• Potential fix for code scanning alert no. 114: Workflow does not contain permissions (#278)

👥 Contributors

Thanks to these contributors ❤️

• @Pangjiping

---

• Docker Hub: opensandbox/egress:v1.0.2
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.2

server 0.1.6

What's New

✨ Features

• secure container e2e case & guide doc (#249)
• add configurable resources in execd init container (#349)

🐛 Bug Fixes

• reject websocket upgrades before proxying (#374)
• normalize sandbox resource names to DNS-1035 (#335)
• reject unsupported image.auth with actionable error (#364)
• fix create sandbox timeout in k8s service. No need to wait pod running when create sandbox (#349)
• fix file download path encoding and host volume validation errors (#257)

📦 Misc

• sync latest image for v-prefixed TAG (#331)

👥 Contributors

Thanks to these contributors ❤️

• @fengcone
• @liuxiaopai-ai
• @Gujiassh
• @stablegenius49
• @Generalwin
• @RonaldJEN
• @Pangjiping

---

• PyPI: opensandbox-server==0.1.6
• Docker Hub: opensandbox/server:v0.1.6
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.6

components/ingress 1.0.3

What's New

✨ Features

• build linux/arm64 image (#330)

🐛 Bug Fixes

• Fixes inconsistent sandbox resource naming between creation and lookup paths when sandbox IDs begin with digits (e.g. UUID-like IDs), which can violate Kubernetes DNS-1035 naming rules. (#318)

📦 Misc

• sync latest image for v-prefixed TAG (#331)

👥 Contributors

Thanks to these contributors ❤️

• @stablegenius49
• @Pangjiping

---

• Docker Hub: opensandbox/ingress:v1.0.3
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.3

Helm Chart opensandbox(all-in-one) 0.1.0 (App v0.1.0)

opensandbox Helm Chart(all-in-one)

The OpenSandbox Helm Chart (all-in-one) will install both the controller and server components.

Chart Version: 0.1.0
App Version: 0.1.0

Installation

直接从 GitHub Release 安装:

helm install opensandbox \
  https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox/0.1.0/opensandbox-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

或者先下载后安装:

# 下载
wget https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox/0.1.0/opensandbox-0.1.0.tgz

# 安装
helm install opensandbox ./opensandbox-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

Note: This is an all-in-one chart that bundles controller and server. The packaged chart already includes all dependencies, no need to run helm dependency build when installing from release.

What's Changed

• Chart version: 0.1.0
• App version: 0.1.0

server 0.1.5

What's New

✨ Features

• add server.eip config for endpoint host in Docker runtime (#316)
• preserve proxy HTTP errors and add route coverage (#312)
• span X-Request-ID by server log (#269)

🐛 Bug Fixes

• validate list metadata query format strictly (#316)
• forward query string in sandbox proxy handler (#266)

📦 Misc

• fix packaging config (#325)
• add sandbox router test coverage (#306)
• add list sandbox test coverage (#292)
• add create and delete sandbox test coverage (#291)
• add renew sandbox test coverage (#290)
• add pause and resume sandbox test coverage (#289)
• add get sandbox endpoint test coverage (#288)
• opensandbox server deployment helm charts (#302)
• update README for kubernetes service (#298)
• add bootstrap operation-not-permitted troubleshooting (#286)
• clarify compose bridge networking and proxy usage (#285)
• update server helm template (#327)
• optimize workflow trigger (#320)

👥 Contributors

Thanks to these contributors ❤️

• @wangdengshan
• @liuxiaopai-ai
• @Spground
• @ninan-nn
• @Pangjiping

---

• PyPI: opensandbox-server==0.1.5
• Docker Hub: opensandbox/server:v0.1.5
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.5

task-executor 0.1.0

What's New

👥 Contributors

Thanks to these contributors ❤️

• @Spground

---

• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/task-executor:v0.1.0

controller 0.1.0

opensandbox-controller Helm Chart

Chart Version: 0.1.0
App Version: 0.1.0

Installation

直接从 GitHub Release 安装:

helm install opensandbox \
  https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox-controller/0.1.0/opensandbox-controller-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

或者先下载后安装:

# 下载
wget https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox-controller/0.1.0/opensandbox-controller-0.1.0.tgz

# 安装
helm install opensandbox ./opensandbox-controller-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

What's Changed

• Chart version: 0.1.0
• App version: 0.1.0

---

• image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/controller:v0.1.0