components/egress 1.0.2

What's New

✨ Features

• add patch policy updates and somke coverage (#392)
• add nameserver exempt for direct DNS forwarding (#356)

📦 Misc

• sync latest image for v-prefixed TAG (#331)
• Potential fix for code scanning alert no. 114: Workflow does not contain permissions (#278)

👥 Contributors

Thanks to these contributors ❤️

• @Pangjiping

---

• Docker Hub: opensandbox/egress:v1.0.2
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.2

server 0.1.6

What's New

✨ Features

• secure container e2e case & guide doc (#249)
• add configurable resources in execd init container (#349)

🐛 Bug Fixes

• reject websocket upgrades before proxying (#374)
• normalize sandbox resource names to DNS-1035 (#335)
• reject unsupported image.auth with actionable error (#364)
• fix create sandbox timeout in k8s service. No need to wait pod running when create sandbox (#349)
• fix file download path encoding and host volume validation errors (#257)

📦 Misc

• sync latest image for v-prefixed TAG (#331)

👥 Contributors

Thanks to these contributors ❤️

• @fengcone
• @liuxiaopai-ai
• @Gujiassh
• @stablegenius49
• @Generalwin
• @RonaldJEN
• @Pangjiping

---

• PyPI: opensandbox-server==0.1.6
• Docker Hub: opensandbox/server:v0.1.6
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.6

components/ingress 1.0.3

What's New

✨ Features

• build linux/arm64 image (#330)

🐛 Bug Fixes

• Fixes inconsistent sandbox resource naming between creation and lookup paths when sandbox IDs begin with digits (e.g. UUID-like IDs), which can violate Kubernetes DNS-1035 naming rules. (#318)

📦 Misc

• sync latest image for v-prefixed TAG (#331)

👥 Contributors

Thanks to these contributors ❤️

• @stablegenius49
• @Pangjiping

---

• Docker Hub: opensandbox/ingress:v1.0.3
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/ingress:v1.0.3

Helm Chart opensandbox(all-in-one) 0.1.0 (App v0.1.0)

opensandbox Helm Chart(all-in-one)

The OpenSandbox Helm Chart (all-in-one) will install both the controller and server components.

Chart Version: 0.1.0
App Version: 0.1.0

Installation

直接从 GitHub Release 安装:

helm install opensandbox \
  https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox/0.1.0/opensandbox-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

或者先下载后安装:

# 下载
wget https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox/0.1.0/opensandbox-0.1.0.tgz

# 安装
helm install opensandbox ./opensandbox-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

Note: This is an all-in-one chart that bundles controller and server. The packaged chart already includes all dependencies, no need to run helm dependency build when installing from release.

What's Changed

• Chart version: 0.1.0
• App version: 0.1.0

server 0.1.5

What's New

✨ Features

• add server.eip config for endpoint host in Docker runtime (#316)
• preserve proxy HTTP errors and add route coverage (#312)
• span X-Request-ID by server log (#269)

🐛 Bug Fixes

• validate list metadata query format strictly (#316)
• forward query string in sandbox proxy handler (#266)

📦 Misc

• fix packaging config (#325)
• add sandbox router test coverage (#306)
• add list sandbox test coverage (#292)
• add create and delete sandbox test coverage (#291)
• add renew sandbox test coverage (#290)
• add pause and resume sandbox test coverage (#289)
• add get sandbox endpoint test coverage (#288)
• opensandbox server deployment helm charts (#302)
• update README for kubernetes service (#298)
• add bootstrap operation-not-permitted troubleshooting (#286)
• clarify compose bridge networking and proxy usage (#285)
• update server helm template (#327)
• optimize workflow trigger (#320)

👥 Contributors

Thanks to these contributors ❤️

• @wangdengshan
• @liuxiaopai-ai
• @Spground
• @ninan-nn
• @Pangjiping

---

• PyPI: opensandbox-server==0.1.5
• Docker Hub: opensandbox/server:v0.1.5
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.5

task-executor 0.1.0

What's New

👥 Contributors

Thanks to these contributors ❤️

• @Spground

---

• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/task-executor:v0.1.0

controller 0.1.0

opensandbox-controller Helm Chart

Chart Version: 0.1.0
App Version: 0.1.0

Installation

直接从 GitHub Release 安装:

helm install opensandbox \
  https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox-controller/0.1.0/opensandbox-controller-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

或者先下载后安装:

# 下载
wget https://github.com/alibaba/OpenSandbox/releases/download/helm/opensandbox-controller/0.1.0/opensandbox-controller-0.1.0.tgz

# 安装
helm install opensandbox ./opensandbox-controller-0.1.0.tgz \
  --namespace opensandbox-system \
  --create-namespace

What's Changed

• Chart version: 0.1.0
• App version: 0.1.0

---

• image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/controller:v0.1.0

server 0.1.4

What's New

🐛 Bug Fixes

• Do not validate OPEN-SANDBOX-API-KEY when request is proxied to sandbox (/sandboxes/{id}/proxy/... or /v1/sandboxes/{id}/proxy/...) (#250)
• fix server deployment under docker compose bridge network (#256)

📦 Misc

• bump egress version to v1.0.1 (#259)

👥 Contributors

Thanks to these contributors ❤️

• @Pangjiping

---

• PyPI: opensandbox-server==0.1.4
• Docker Hub: opensandbox/server:v0.1.4
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.4

components/egress 1.0.1

What's New

✨ Features

• Egress stage two for IP/CIDR rules, DoT/DoH block (#183)
• Egress stage three for dynamic IP insertion from DNS answers (#197)
• unified logger by internal package (#244)
• print build/compile info when start up (#245)

📦 Misc

• chore(deps): bump golang.org/x/net from 0.26.0 to 0.38.0 in /components/egress (#192)

👥 Contributors

Thanks to these contributors ❤️

• @Pangjiping
• @dependabot

---

• Docker Hub: opensandbox/egress:v1.0.1
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.1

server 0.1.3

What's New

✨ Features

• support multi ingress gateway mode (#161)
• get kubernetes resource by informer (#213)
• add Docker named volume support with subPath for PVC backend (#233)
• support header ingress gateway mode (#241)

🐛 Bug Fixes

• replaces os.path with posixpath for paths used inside containers to ensure forward slashes are used regardless of the host OS (fixing Windows support) (#234)

📦 Misc

• Potential fix for code scanning alert no. 92: Workflow does not contain permissions (#239)

👥 Contributors

Thanks to these contributors ❤️

• @hittyt
• @Pangjiping
• @dependabot

---

• PyPI: opensandbox-server==0.1.3
• Docker Hub: opensandbox/server:v0.1.3
• Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/server:v0.1.3