Repolode
投稿する
Katakate

Katakate/k7

Self-hosted Kubernetes-based infrastructure that runs untrusted code in lightweight VM sandboxes, controlled via a CLI, HTTP API and Python SDK.

代替できる製品:AWS Fargate

GitHub で見る公式サイト
スター
821
フォーク
26
未解決の Issue
7
最終コミット
15 時間前

これは何？

k7 is a self-hosted system for creating, managing and orchestrating lightweight virtual machine sandboxes that execute untrusted code. It runs on Kubernetes and uses Kata Containers to wrap each sandbox in a VM, with Firecracker, QEMU and k7's own k7d microVM runtime available as backends. It was built primarily for AI agents that need to run arbitrary code at scale.

Users install it on Ubuntu nodes with an Ansible-based installer and pick a backend at install time. Sandboxes are created from a YAML config or the Python SDK, and can be run commands in, paused, resumed, snapshotted and forked. The k7d backend supports warm forks that copy both disk and memory state, while the QEMU path uses Longhorn for replicated, persistent disks. Docker builds and runs can be performed inside a sandbox with the --docker flag.

Sandboxes are network-isolated by default. Inter-sandbox traffic is blocked unless explicitly allowed, and egress can be restricted to CIDRs or, with Cilium, to domain names. Access is controlled through API keys with roles and optional tenants and quotas. The project is in beta and is described by its maintainers as still under security review.

主な機能

  • 01Creates VM-isolated sandboxes on Kubernetes using Kata with Firecracker, QEMU or the k7d runtime.
  • 02Provides a CLI, an HTTP API and a sync/async Python SDK for managing sandboxes.
  • 03Supports pause, resume, snapshot and fork of sandboxes, with warm memory-and-disk forks on the k7d backend.
  • 04Blocks sandbox-to-sandbox traffic by default and allows per-sandbox egress allowlists, including domain names via Cilium.
  • 05Offers Docker build and run inside sandboxes via the --docker option.
  • 06Includes API keys with roles, tenants and quotas for multi-user access.

ユースケース

  • Running code generated by AI agents in isolated environments.
  • Building a self-hosted serverless execution platform on your own servers.
  • Running CI/CD jobs that build containers without Docker-in-Docker on the host.
  • Forking a prepared sandbox state to run many parallel experiments.

トピック

#sandbox#kubernetes#virtual-machine#firecracker#ai-agents#self-hosted#code-execution#security#agents#code

よくある質問

k7 とは？
Self-hosted Kubernetes-based infrastructure that runs untrusted code in lightweight VM sandboxes, controlled via a CLI, HTTP API and Python SDK. k7 is a self-hosted system for creating, managing and orchestrating lightweight virtual machine sandboxes that execute untrusted code. It runs on Kubernetes and uses Kata Containers to wrap each sandbox in a VM, with Firecracker, QEMU and k7's own k7d microVM runtime available as backends. It was built primarily for AI agents that need to run arbitrary code at scale.
k7 は無料で使えますか？ライセンスは？
k7 は Apache-2.0 ライセンスのオープンソースです。商用製品で使う前にライセンス条件を確認してください。
k7 は今もメンテナンスされていますか？
活発にメンテナンス中。k7 の最終コミットは 2026年10月18日 です。
k7 は何に使えますか？
Running code generated by AI agents in isolated environments. Building a self-hosted serverless execution platform on your own servers. Running CI/CD jobs that build containers without Docker-in-Docker on the host. Forking a prepared sandbox state to run many parallel experiments.
k7 はどこで入手できますか？
ソースコードとインストール手順は GitHub にあります：https://github.com/Katakate/k7

概要はプロジェクトの README をもとに AI が生成しています。GitHub の数値は毎日更新されます。

関連プロジェクト