OpenSandbox · Issues· 134 open

bug(docker): snapshots of gVisor (runsc) sandboxes silently drop all writes under runsc's default --overlay2=root:self

feat(docker): allow snapshotting a Paused sandbox on the Docker runtime

[Bug] Credential Proxy injects Authorization too late for streamed uploads, causing authentication failures

fix(server): docker-runtime proxy handler hardcodes resolve_internal=True — server-proxy hangs when lifecycle server runs in a container with bridge sandboxes

Expose host/port options in MCP

chore: migrate remaining legacy license headers to The OpenSandbox Authors

Question: What happens to unsnapshotted rootfs data after OOM or abnormal container termination?

SDK: Add commands.setEnv syntactic sugar for runtime environment variable injection

Systematically audit and clean up all-language SDKs: docs, tests, comments, logic fixes, deduplication

Remove `informer_enabled` config: make the informer-backed cache the only read path

[Feature] Support execution identity for file APIs to enforce per-session filesystem permissions

execd isolated sessions: upper_max_bytes enforced only at allocation — writes uncapped, then all new sessions wedge

Multi-tenant: renew intents are silently dropped after a server restart; in-use sandboxes are deleted at expiry

Multi-Tenancy缺少一个admin权限的key

feat(egress): chain transparent mitmproxy egress through an upstream CONNECT proxy