Expand description
microsandbox
is a secure MicroVM provisioning system for running untrusted code in isolated environments.
§Overview
microsandbox provides a robust foundation for running AI workloads in isolated microVMs. It handles:
- VM lifecycle management
- OCI image distribution and management
- Service orchestration and coordination
- Resource constraints and monitoring
- Database persistence for system state
§Key Features
- Secure Isolation: True VM-level isolation through microVMs
- Container Experience: Works with standard OCI/Docker images
- Fast Startup: Millisecond-level VM provisioning
- Resource Control: Fine-grained CPU, memory and network limits
- Simple API: RESTful interface for service management
- Persistence: Database-backed state management
§Architecture
microsandbox consists of several key components:
- VM: Low-level microVM configuration and management
- OCI: Image pulling, layer handling, and registry interactions
- Management: Orchestration, sandbox lifecycle, and coordination
- Runtime: Process supervision and monitoring
- Models: Database and persistence schema
§Modules
config
- Configuration types and validationmanagement
- Central management for sandboxes, images, and orchestrationmodels
- Database models and persistence schemaoci
- OCI image and registry operationsruntime
- Process supervision and monitoringutils
- Common utilities and helpersvm
- MicroVM configuration and control
Modules§
- config
- Configuration types and helpers.
- management
- Management components for the Microsandbox runtime.
- models
- Database models for Microsandbox.
- oci
- OCI (Open Container Initiative) module for interacting with container registries.
- runtime
- Runtime components for the Microsandbox runtime.
- utils
- Utility functions and types.
- vm
- Runtime management and configuration.
Structs§
- AnyError
- An error that can represent any error.
Enums§
- Invalid
MicroVM Config Error - An error that occurred when an invalid MicroVm configuration was used.
- Microsandbox
Error - An error that occurred during a file system operation.
Functions§
- Ok
- Creates an
Ok
MicrosandboxResult
.
Type Aliases§
- Microsandbox
Result - The result of a microsandbox-related operation.