OpenSandbox

license

Apache-2.0(OSI)

source

public(Go execd + multi-language SDKs)

runtimes

Docker/Kubernetes

core features withheld

no

OpenSandbox is Apache-2.0 and fully self-hostable: the repository tree covers the whole product, including the server, Kubernetes manifests, CLI and SDKs, with no enterprise or proprietary directory. The project's site is documentation only, with no pricing page, hosted offering or sign-up, so there is no managed tier for any part of the core to be gated behind.

• https://api.github.com/repos/opensandbox-group/OpenSandbox recorded 2026-08-13

  Repo metadata - license spdx_id Apache-2.0, default branch main, not archived, pushed 2026-08-13, homepage open-sandbox.ai. The repository now lives under the opensandbox-group org; the alibaba/OpenSandbox path redirects here and returns an identical body.

• https://api.github.com/repos/opensandbox-group/OpenSandbox/git/trees/main?recursive=1 recorded 2026-08-13

  Untruncated recursive tree, 2,642 entries. Ten LICENSE paths, all Apache-2.0 copies of the root placed beside the CLI, the server and each SDK. The whole product is public - server/, components/, kubernetes/, cli/, sdks/, specs/, sandboxes/ - and there is no ee/, enterprise/, commercial/ or proprietary/ path.

• https://github.com/alibaba/OpenSandbox recorded 2026-06-04

  Apache-2.0 license; general-purpose AI-agent sandbox; Docker/K8s runtimes; multi-language SDKs; self-host

• https://open-sandbox.ai recorded 2026-09-29

  The project site is documentation only and its footer reads "Released under the Apache 2.0 License."; searched the body for pricing, sign up and enterprise: none.

• https://raw.githubusercontent.com/opensandbox-group/OpenSandbox/main/components/execd/go.mod recorded 2026-09-29

  The execd component is public Go source, its manifest declaring "module github.com/alibaba/opensandbox/execd".

• https://raw.githubusercontent.com/opensandbox-group/OpenSandbox/main/LICENSE recorded 2026-09-29

  The root LICENSE file is the unmodified Apache License, opening "TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION", with no appended exceptions or additional terms.

• https://raw.githubusercontent.com/opensandbox-group/OpenSandbox/main/README.md recorded 2026-09-29

  The README states "This project is open source under the [Apache 2.0 License](LICENSE)." and documents self-hosting via "uvx opensandbox-server init-config ~/.sandbox.toml --example docker"; searched the body for enterprise, license key, commercial, pricing, paid, cloud-only and proprietary: none.

• https://raw.githubusercontent.com/opensandbox-group/OpenSandbox/main/server/pyproject.toml recorded 2026-09-29

  The server package manifest declares the public control plane, "FastAPI control plane for OpenSandbox that manages sandbox lifecycle", with "License :: OSI Approved :: Apache Software License".

GitHub stars are the only adoption signal for OpenSandbox: the project is only months old, and no download or named-deployment figure has surfaced yet. Stars accumulated quickly after launch, but a star is not a use, so this reads as early visibility rather than measured adoption.

• https://api.github.com/repos/opensandbox-group/OpenSandbox recorded 2026-08-13

  Repo metadata: 12,522 stars, 1,056 forks, 51 watchers, pushed 2026-08-13.

• https://github.com/alibaba/OpenSandbox recorded 2026-06-04

  11.3k GitHub stars; released Mar 2026; no usage/download figures

OpenSandbox ships working, not merely proposed, support for pluggable secure runtimes: gVisor, three Kata Containers backends and plain runc as fallback. It does not install those runtimes itself, so the microVM tier depends on infrastructure the operator supplies, and its cold-start figures are the project's own planning estimates rather than an independent measurement.

• https://open-sandbox.ai/architecture/fast-sandbox/firecracker recorded 2026-09-29

  The Firecracker page says "Each sandbox then runs as a real KVM virtual machine inside the Fastlet pod network namespace".

• https://open-sandbox.ai/architecture/fast-sandbox/performance recorded 2026-09-29

  The performance page reports Firecracker create timings measured on one host, noting "single-run observations, not tuned benchmark medians", with serial create-to-ready p50 97 ms.

• https://open-sandbox.ai/guides/pause-resume recorded 2026-09-29

  The pause-resume guide describes Kubernetes-backed persistence: "Resume restores the sandbox from that image" after pause commits the root filesystem as an OCI image.

• https://open-sandbox.ai/guides/secure-container recorded 2026-09-29

  The secure-container guide says "OpenSandbox supports the following secure runtime types through server-level configuration" and lists gvisor, kata, firecracker and empty (runc), and that "The secure runtime is configured once at the server level by administrators".

• https://open-sandbox.ai/guides/secure-container recorded 2026-09-29

  The secure-container guide states the server "validates the configured runtime at startup and will refuse to start if the runtime is unavailable", so the isolation tier depends on operator-supplied runtimes.

• https://open-sandbox.ai/sdks/ recorded 2026-09-29

  The SDK index says "OpenSandbox provides five sandbox SDKs for lifecycle management, command execution, file operations, and resource metrics".

• https://raw.githubusercontent.com/opensandbox-group/OpenSandbox/main/server/opensandbox_server/services/runtime_resolver.py recorded 2026-08-14

  SecureRuntimeResolver as shipped code: Docker runtime map (gvisor -> runsc, kata -> kata-runtime) and Kubernetes RuntimeClass map (gvisor, kata-qemu, kata-fc), with startup validation - the VM/microVM tier.