{
  "schema_version": "1.0",
  "id": "archive:https://github.com/TencentCloud/CubeSandbox",
  "slug": "cubesandbox-1d2cg1q",
  "url": "https://feed7.dev/p/cubesandbox-1d2cg1q",
  "title": "TencentCloud/CubeSandbox",
  "why_included": "Tencent Cloud open-sourced a KVM microVM sandbox for agent code execution: sub-60ms cold starts, under 5MB overhead per instance, and E2B SDK compatibility as a self-hostable drop-in.",
  "summary": "**The gist** Tencent Cloud's CubeSandbox is an Apache 2.0 microVM sandbox for running agent code, built on **RustVMM/KVM**. It claims **sub-60ms** cold starts with under **5MB** memory overhead per instance, thousands of sandboxes per node, and an **E2B SDK-compatible** REST API pitched as drop-in migration from the hosted service.",
  "practical_implication": "**Why it matters** If you pay for hosted sandboxes to execute agent-generated code, this is a self-hostable alternative with hardware-level isolation instead of containers — plus agent-specific guardrails: a **credential vault** that keeps keys out of sandboxed code, **egress allowlists** with traffic auditing, and **snapshot/clone/rollback** at sub-second granularity for restoring state.",
  "agent_context": "**The gist** Tencent Cloud's CubeSandbox is an Apache 2.0 microVM sandbox for running agent code, built on **RustVMM/KVM**. It claims **sub-60ms** cold starts with under **5MB** memory overhead per instance, thousands of sandboxes per node, and an **E2B SDK-compatible** REST API pitched as drop-in migration from the hosted service.\n\n**Why it matters** If you pay for hosted sandboxes to execute agent-generated code, this is a self-hostable alternative with hardware-level isolation instead of containers — plus agent-specific guardrails: a **credential vault** that keeps keys out of sandboxed code, **egress allowlists** with traffic auditing, and **snapshot/clone/rollback** at sub-second granularity for restoring state.\n\n**Watch out** It needs a Linux host with **KVM**, so no local-Mac runs, and the E2B compatibility layer has acknowledged **API gaps**. **Kubernetes-native** deployment and volume support are still roadmap items, and the performance figures are the project's own benchmarks.",
  "source": {
    "name": "GitHub",
    "url": "https://github.com/TencentCloud/CubeSandbox",
    "published_at": null
  },
  "source_class": "tool",
  "content_type": "GitHub Repo",
  "layer": "infra",
  "domains": [
    "coding"
  ],
  "topics": [
    "sandboxing"
  ],
  "verification": {
    "status": "needs_review",
    "label": "Needs Review",
    "method": "unverified",
    "verified_at": null
  },
  "uncertainty": [
    "It needs a Linux host with **KVM**, so no local-Mac runs, and the E2B compatibility layer has acknowledged **API gaps**. **Kubernetes-native** deployment and volume support are still roadmap items, and the performance figures are the project's own benchmarks."
  ],
  "lifecycle": "Current",
  "published_at": null,
  "modified_at": null,
  "supersedes": [],
  "expires_at": null,
  "formats": {
    "html": "https://feed7.dev/p/cubesandbox-1d2cg1q",
    "json": "https://feed7.dev/p/cubesandbox-1d2cg1q.json",
    "markdown": "https://feed7.dev/p/cubesandbox-1d2cg1q.md"
  }
}