microsandbox

Cellar helps you run isolated microsandbox VMs on your own infra today.

Run OpenClaw, Hermes and your own agents in microsandbox microVMs. One reviewable TOML role sets image, allowed domains and host-bound secrets. No daemon.

Sandbox for AI coding agents (Claude Code, opencode, pi): runs each project in an isolated microVM with host-side secret injection. Linux/KVM & macOS.

🧱 A curated list of SDKs, integrations, tools, and resources for microsandbox

Community-maintained Ruby bindings for microsandbox — hardware-isolated microVM sandboxes for AI agents and untrusted code.

Benchmarked agent execution runtime for Python. Sub-10ms cold starts, real-time streaming, time-travel debugging, and self-growing tool libraries. Compare 3 sandbox backends: Docker (OpenSandbox), MicroVM, and in-process AST.

Unofficial testbed for display and GPU support in microsandbox microVMs on Apple Silicon, with an Omarchy (Hyprland) desktop as the workload.

A daemon that manages a GitHub Actions runner scale set and runs every job in a fresh, ephemeral microsandbox microVM.

Computers for your agents. Run Linux sandboxes locally or remotely, with a desktop and computer use.

🥾 base images that bundle an init system

Sandboxes à la carte

.NET SDK for microsandbox

A Docker sbx-style terminal dashboard for microsandbox — manage microVM sandboxes visually.

Project-based sandbox manager for coding agents, with a keyboard- and mouse-driven Go TUI.

Per-project microsandbox microVMs for coding agents: deny-by-default egress, credentials substituted host-side, never inside the VM.

OpenCode image, for Docker and microsandbox

MCP server for running foundational agent tools in a hardware-isolated sandbox

Ubuntu 26.04 Microsandbox image with Docker-in-Docker, plus prod launcher