- Fixed the issue where CubeMaster returned a 5xx error instead of a 4xx error when the sandbox template does not exist.
- Fixed the missing SSL RootCA certificate issue during one-click deployment in v0.1.1.
- Fixed the cube proxy image build failure during deployment in v0.1.1.
- Fixed the issue where the latest vmlinux was not used during template reconstruction, improving the stability of the sandbox environment.
- Updated the one-click installation script to support non-eth0 network interfaces, resolving stability issues with CubeProxy CA certificates.
- Disabled GRO on the primary network interface during initialization to enhance network stability.
- Fixed incorrect error handling when the target was not found during template cleanup, ensuring proper error returns.
- Added the
cubebox destroycommand, enabling sandbox deletion via the CLI. - Added integration examples for the OpenAI Agents SDK (including a code interpreter).
- Rewrote the HTTPS and domain configuration documentation, adding explanations for wildcard DNS records.
- Implemented a parallel CI build pipeline for multiple components to optimize build efficiency.
- Added support for automatic synchronization of GitHub Release assets to
cnb.cool/CubeSandbox/CubeSandbox.
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
Cube Sandbox is a high-performance, out-of-the-box secure sandbox service built on RustVMM and KVM. It supports both single-node deployment and can be easily scaled to a multi-node cluster. It is compatible with the E2B SDK, capable of creating a hardware-isolated sandbox environment with full service capabilities in under 60ms, while maintaining less than 5MB memory overhead.
-
Blazing-fast cold start: built on resource pool pre-provisioning and snapshot cloning technology, average end-to-end cold start time for a fully serviceable sandbox is < 60ms.
-
High-density deployment on a single node: extreme memory reuse via CoW technology combined with a Rust-rebuilt, aggressively trimmed runtime keeps per-instance memory overhead below 5MB — run thousands of Agents on a single machine.
-
True kernel-level isolation: each Agent runs with its own dedicated Guest OS kernel, eliminating container escape risks and enabling safe execution of any LLM-generated code.
-
Zero-cost migration (E2B drop-in replacement): natively compatible with the E2B SDK interface. Just swap one URL environment variable — no business logic changes needed.
-
Network security: CubeVS, powered by eBPF, enforces strict inter-sandbox network isolation at the kernel level with fine-grained egress traffic filtering policies.
Cube Sandbox has been validated at scale in Tencent Cloud production environments, proven stable and reliable — before this day it ever existed as open source, it had already quietly run behind real AI Agent workloads, serving real users, at production load.
In real production deployments, a single physical machine can spin up tens of thousands of sandboxes within minutes.
We open-source it today not as a prototype, but as production-hardened infrastructure that has already stood the test of real-world scale.
Before this code was ever public, it was already doing its job: spinning up sandboxes in milliseconds, isolating Agent workloads at the kernel level, and holding up under real production load at Tencent Cloud. None of that happened by accident.
Today we open the door. The high-performance Agent infrastructure you shaped now belongs to the world — to every developer who believes that safe, instant, and lightweight code execution should be open and self-hostable.
To those who contributed before this day: you built the foundation. To those who will contribute after: you are what turns a foundation into an ecosystem.
Open source shines because of you!