Back to directory

CubeSandbox

A high-performance, E2B-compatible sandbox service for AI agents, built on RustVMM and KVM, creating hardware-isolated sandboxes in under 60 milliseconds with less than 5 megabytes of memory overhead.

CubeSandbox

CubeSandbox is a sandbox service for AI agents, built on RustVMM and KVM, that creates a hardware-isolated, fully serviceable sandbox in under 60 milliseconds with less than 5 megabytes of memory overhead. It is compatible with the E2B SDK, and supports both single-node deployment and scaling out to multi-node clusters, including deployment of its control plane and compute nodes on Kubernetes.

A copy-on-write snapshot engine gives it event-level snapshots, instant cloning and rollback to any saved state, and an auto-pause feature suspends idle sandboxes and wakes them again on the next request. Cross-node pause and resume, backed by an S3 storage backend, lets a sandbox be suspended on one node and resumed on another, or created from a snapshot.

Other features include a Terraform-based one-click cluster deployer, native ARM64 support, per-sandbox network-policy hardening with traffic tokens and policy-routed egress, a credential vault that lets an agent call external APIs without its keys ever entering the sandbox, and a dashboard that shows template health and version status across a deployment.

More in Containers

See all 120
  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • minienv

    github.com

    Reads an existing docker compose file and deploys it as a remote preview environment with little setup, with optional public endpoints and authentication so others can review in-flight work.

  • Rig

    npmjs.com

    Gives each coding agent, such as Claude Code, Cursor or Codex, its own cloud Linux desktop with a running dev server, tests and a signed-in Chrome, so the developer's laptop stays free while several agents work at once.