Repolode
Submit
superradcompany

superradcompany/microsandbox

Local microVM runtime and SDK for running untrusted code and AI agent workloads in hardware-isolated sandboxes with OCI images.

Open-source alternative to:Docker Desktop

View on GitHubWebsite
Stars
8,965
Forks
514
Open issues
134
Last commit
yesterday

What is it?

Microsandbox is a runtime and SDK for running untrusted workloads such as AI agent code, user-submitted code, plugins, CI jobs and scrapers inside small virtual machines on the local machine. Each sandbox is a microVM with hardware-level isolation, and it can be created from the msb CLI or directly from application code in TypeScript, Rust, Python, Go and Ruby without a separate server or long-running daemon.

Sandboxes run standard OCI container images pulled from Docker Hub, GHCR or other OCI registries, and they support familiar image, command, shell and volume workflows. The project also provides forking of live sandboxes, snapshots that can be saved and restored later, detached long-running sessions, and per-host network allowlists with secrets that are injected without entering the VM. Supported hosts are Apple Silicon macOS (with Hypervisor-based virtualization), Linux with KVM, and Windows with WHP.

The project is marked as beta software, so breaking changes and missing features should be expected.

Key features

  • 01Hardware-isolated microVMs with boot times under 100 ms on an M1 machine.
  • 02Runs standard OCI container images from Docker Hub, GHCR, or other registries.
  • 03Fork live sandboxes and save or restore snapshots.
  • 04Embeddable SDKs for TypeScript, Rust, Python, Go, and Ruby with no separate server.
  • 05Network allowlists and secrets that never enter the VM.
  • 06Runs on macOS (Apple Silicon), Linux (KVM), and Windows (WHP).

Use cases

  • Running AI agent-generated code in an isolated environment.
  • Executing user-submitted code or third-party plugins safely.
  • Running self-hosted CI jobs in disposable microVMs.
  • Testing database migrations and restoring a clean baseline from a snapshot.

Quick start

  1. 1

    Install the CLI with Homebrew

    brew install superradcompany/tap/microsandbox
  2. 2

    Start your first sandbox

    msb run ubuntu

Things to know

  • Microsandbox is beta software with expected breaking changes and missing features.
  • Requires Apple Silicon on macOS, KVM on Linux, or WHP on Windows.

In collections

Sandboxes for AI agentsOpen-source AI agent frameworks & appsPrivacy & local-first toolsSecurity scanners, audits & threat intel tools

Topics

#microvm#sandbox#ai-agents#virtualization#security#rust#oci-containers#local-first#agents#docker

FAQ

What is microsandbox?
Local microVM runtime and SDK for running untrusted code and AI agent workloads in hardware-isolated sandboxes with OCI images. Microsandbox is a runtime and SDK for running untrusted workloads such as AI agent code, user-submitted code, plugins, CI jobs and scrapers inside small virtual machines on the local machine. Each sandbox is a microVM with hardware-level isolation, and it can be created from the msb CLI or directly from application code in TypeScript, Rust, Python, Go and Ruby without a separate server or long-running daemon.
Is microsandbox free to use? What license does it have?
microsandbox is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is microsandbox still maintained?
Actively maintained. The last commit to microsandbox was on Nov 6, 2026.
What can I use microsandbox for?
Running AI agent-generated code in an isolated environment. Executing user-submitted code or third-party plugins safely. Running self-hosted CI jobs in disposable microVMs. Testing database migrations and restoring a clean baseline from a snapshot.
How do I install microsandbox?
Install the CLI with Homebrew: brew install superradcompany/tap/microsandbox Start your first sandbox: msb run ubuntu
Where can I get microsandbox?
The source code and installation instructions are on GitHub: https://github.com/superradcompany/microsandbox

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects