Kata Containers

Active

GitHub Rust Apache-2.0

Description

Lightweight VM sandboxes with a container interface from Kata Containers.

Key Features

Container interface — Docker/Kubernetes compatible
Hardware isolation — Independent VM per Pod
Multi-hypervisor — QEMU/Cloud Hypervisor
Production-grade — Telecom and finance deployments
Confidential compute — Intel TDX / AMD SEV

Use Cases

💡 Hardware-isolated pods for Kubernetes.

💡 Run untrusted workloads in multi-tenant setups.

💡 Secure containers in finance and telecom.

Strengths & Limitations

✅ Strengths

• Actively maintained, recent updates
• High community interest (8.6k stars)
• Permissive open-source license (Apache-2.0)

⚠️ Limitations

• High issue backlog (1.2k open issues)

Quick Start

# Install and run
kubectl apply -f https://raw.githubusercontent.com/kata-containers/kata-containers/main/tools/packaging/kata-deploy/kata-rbac.yaml
# Verify the service is up

Visit GitHub

Related Projects

CubeSandbox

11.7k · Go

Active A

A high-performance, secure sandbox service for AI agents by Tencent Cloud, built on RustVMM and KVM with hardware-level isolation, sub-60ms cold start, <5MB memory overhead, and E2B SDK compatibility.

sandboxcode-executionrust +2

· Blazing-fast cold start: sub-60ms end-to-end sandbox creation via resource pool pre-provisioning and snapshot cloning
· Ultra-low memory overhead: less than 5MB per instance, enabling thousands of sandboxes on a single machine
· True kernel-level isolation: each agent runs with its own dedicated Guest OS kernel based on RustVMM and KVM

View full details → View on GitHub

landrun

2.3k · Go

Normal A

landrun is a lightweight, Landlock-based Linux process sandbox that runs any program under tight capability isolation without requiring root.

sandboxlandlocklinux +2

· Landlock kernel isolation - leverages Linux 5.13+ Landlock LSM for filesystem access control
· No-root deployment - regular users can launch sandboxes without sudo or privileged containers
· Fine-grained policy - declare readable, writable, and executable directory sets from the CLI

View on GitHub

Wuying AgentBay SDK

1.1k · Python

Normal A

Wuying AgentBay SDK is a cloud sandbox built for AI agents, providing secure isolated execution environments for agents to safely run code and operations in the cloud, suitable for production-grade agent applications requiring sandboxed execution.

sandboxcloud-executionsecurity +1

· On-demand cloud sandboxes with second-level startup — create, use, and destroy isolated environments instantly
· Four capability modes: browser automation, desktop app control, mobile UI testing, and code execution
· Multi-language SDKs: Python, TypeScript, Golang, and Java — full coverage

View on GitHub

OpenSandbox

14.9k · Go

Active A

OpenSandbox is an open-source, secure, fast, and extensible sandbox runtime for AI agents, developed by Alibaba.

sandboxai-infrastructurekubernetes +2

· Multi-language SDKs: Python, Java/Kotlin, JavaScript/TypeScript, C#/.NET, and Go with unified sandbox APIs
· Docker and Kubernetes runtimes: built-in lifecycle management for both local development and large-scale distributed scheduling
· Strong isolation: supports gVisor, Kata Containers, and Firecracker microVM secure container runtimes

View full details → View on GitHub

sandbox-executionmicrovmfirecracker

Sandboxing Code Execution in AI Agents: From Docker to microVMs, a Decision Matrix

A side-by-side comparison of five sandbox technologies, weighing latency, security, and ops cost.