# CubeSandbox

> Empowering your AI Agents.

Instant, Concurrent, Secure & Lightweight Sandbox Service for AI Agents

## English

- [Introduction](https://cubesandbox.com/guide/introduction.md)
- [Quick Start](https://cubesandbox.com/guide/quickstart.md)
- [PVM Deployment](https://cubesandbox.com/guide/pvm-deploy.md)
- [Bare-Metal / Physical Machine Deployment](https://cubesandbox.com/guide/bare-metal-deploy.md)
- [Kubernetes Deployment](https://cubesandbox.com/guide/kubernetes.md)
- [About us](https://cubesandbox.com/about-us.md): Introduction to the Tencent Cloud IaaS Frontier Technology Team.
- [CubeVS Network Model](https://cubesandbox.com/architecture/network.md)
- [Architecture Overview](https://cubesandbox.com/architecture/overview.md)
- [Blog](https://cubesandbox.com/blog.md)
- [Welcome to the Cube Sandbox Blog](https://cubesandbox.com/blog/posts/2026-05-15-welcome.md): We are launching a blog to share release notes, technical deep-dives, and community stories around Cube Sandbox.
- [Deploying Cube Sandbox on AWS EC2 Nested-Virtualization Instances: A Practical Guide](https://cubesandbox.com/blog/posts/2026-05-17-aws-nested-virt-cube-deploy.md): A community walkthrough covering the full deployment of Cube Sandbox on an AWS EC2 nested-virtualization instance (c8i.2xlarge) — environment setup, three required patches (Cubelet, CubeShim, and Guest image), service bring-up, template creation, and sandbox creation via the E2B-compatible SDK. Note: original article is in Simplified Chinese.
- [Cube Sandbox v0.2.2: One Step Closer to Drop-in E2B Compatibility, with a Stability Sweep](https://cubesandbox.com/blog/posts/2026-05-19-cubesandbox-v0.2.2-release.md): Following v0.2.0, Cube Sandbox shipped v0.2.2 on May 18. This release extends E2B compatibility from the SDK layer down to the wire-protocol layer, fixes seven recurring stability issues from the v0.1.x era, and lands the first round of CVE remediations for the 0.2 series.
- [Cube Sandbox Quick Start: Getting the Pre-PVM-Deployment Environment Right on a Standard Cloud VM](https://cubesandbox.com/blog/posts/2026-05-22-cube-pvm-on-opencloudos9.md): A community walkthrough on preparing the prerequisite environment — OS choice, kernel version, dependencies — for deploying Cube Sandbox in PVM mode on a standard cloud VM running OpenCloudOS 9. (Article in Simplified Chinese.)
- [From Serverless to Agent: Design Reflections on the Cube System](https://cubesandbox.com/blog/posts/2026-05-22-from-serverless-to-agent.md): How a system originally forged in years of Serverless workloads — high density, high elasticity, high concurrency, strong isolation — extends naturally into the Agent era. This post walks through Cube's core designs (distributed scheduling + node-local bin-packing, resource pooling, frontend/backend decoupling, snapshot restore + lazy load, resource sharing, full-stack lock optimization, native security, and reusing VM resources) and the new capabilities for Agent workloads (low-latency code execution, Agentic RL, image acceleration, snapshot-based branch cloning, event-level snapshot & rollback).
- [CubeSandbox Core Operations Performance Benchmark Report](https://cubesandbox.com/blog/posts/2026-06-01-cubesandbox-perf-benchmark.md): Performance benchmark data for CubeSandbox on a real bare-metal node, covering sandbox creation from template (cold-start latency, concurrency scaling, single-host density) and Snapshot operations (Snapshot creation, create-from-snapshot, Rollback, Clone). Each section includes the exact commands needed to reproduce the results.
- [CubeSandbox Core Operations Performance Benchmark Report (PVM Cloud Server)](https://cubesandbox.com/blog/posts/2026-06-03-cubesandbox-perf-benchmark-pvm.md): Performance benchmark data for CubeSandbox on a Tencent Cloud SA9.4XLARGE32 standard CVM (PVM kernel), covering sandbox creation from template (cold-start latency, concurrency scaling, single-host density) and Snapshot operations (Snapshot creation, create-from-snapshot, Rollback, Clone, Pause/Resume). Each section includes the exact commands needed to reproduce the results.
- [Cube Sandbox v0.3.0: A Time Machine and a Cloning Booth for Your AI Agents](https://cubesandbox.com/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md): In modern AI Agent stacks, the sandbox plays the role of a "secure runtime" — executing model-generated code and tool calls. Cube Sandbox v0.3.0, with 82 commits from 22 contributors, is a foundational architecture upgrade aimed at high-concurrency, long-horizon, and reinforcement-learning workloads. Around three new SDK primitives — snapshot / clone / rollback — it brings "environment replication" and "error recovery" down from minutes to milliseconds.
- [Making Legacy Software Agent-Friendly: Fast Spawn, Branching, and Rollback](https://cubesandbox.com/blog/posts/2026-06-17-cubesandbox-agent-friendly-service.md): When software consumers shift from humans to Agents, the requirements change fundamentally — creating a service is no longer an ops task, but part of the inference-and-action loop. Neon's $1B acquisition by Databricks validates this thesis. Cube Sandbox turns "fast spawn, clone, and rollback" into a general-purpose runtime capability, letting any traditional software service become Agent-friendly with near-zero code changes.
- [Cube Sandbox v0.4.0: From Isolating Agents to Governing Agents](https://cubesandbox.com/blog/posts/2026-06-17-cubesandbox-v0.4.0-release.md): Following v0.3.0's snapshot/clone/rollback trio, v0.4.0 ships 58 commits from 15 contributors centered on three questions: egress governance (CubeEgress L7 proxy + credential injection + domain filtering + access audit), observability (container log forwarding via vsock), and consistency (node component version matrix + template compatibility checks). Also delivers a 41% reduction in network P99 latency and cuts template build peak disk from 4.2x to 1.2x image size.
- [Cube Sandbox: A Deep Dive into Secure Sandbox Networking](https://cubesandbox.com/blog/posts/2026-06-23-cubesandbox-network-deep-dive.md): AI Agents give machines autonomous execution power — and open a Pandora's box of data exfiltration and credential abuse. CubeSandbox builds an end-to-end network security system — from virtual switching to application-layer auditing — on a foundation of KVM MicroVM isolation, an eBPF in-kernel network datapath, and L7 proxy deep inspection. This article dissects the design and implementation of core components like CubeVS, CubeProxy, and CubeEgress, and shows how Cube balances open execution with security and control.
- [Instant Snapshots, Zero-Copy Clones: A Deep Dive into Cube's Snapshot, Clone, and Rollback Mechanisms](https://cubesandbox.com/blog/posts/2026-06-25-cubesandbox-snapshot-clone-rollback-deep-dive.md): How does Cube Sandbox achieve sub-second snapshots of tens-of-GiB filesystems, memory checkpoints that write only a fraction of total guest RAM, and cloning that creates N independent copies with near-zero disk growth? This article dissects the three interlocking kernel mechanisms — XFS reflink, /proc/pagemap anonymous page detection, and soft-dirty bit — that power Cube v0.3.0's snapshot, clone, and rollback capabilities.
- [Cube v0.5.0: Auto-Pause, ARM Support, One-Click Cluster Deploy — Taking Sandboxes to Production](https://cubesandbox.com/blog/posts/2026-07-03-cubesandbox-v0.5.0-release.md): If v0.3.0 solved 'fast' (millisecond snapshot / clone / rollback), and v0.4.0 solved 'governance' (L7 egress control + observability + cluster consistency), then v0.5.0 aims to solve 'stable, efficient, broad'. With 116 commits from 26 contributors, v0.5.0 brings four core features: AutoPause/AutoResume sandbox lifecycle automation, ARM64 full-stack native support, Tencent Cloud Terraform one-click cluster deployment, and network security enhancements.
- [Cube Sandbox Officially Supports Arm: Tencent Cloud and Arm Team Up to Unlock Multi-Architecture Compute for Agents](https://cubesandbox.com/blog/posts/2026-07-08-cubesandbox-arm-support.md): On July 3, Tencent Cloud open-sourced the AI Agent secure sandbox Cube Sandbox v0.5.0. Native Arm support — one of the headline features — has been merged upstream with substantial investment from the Arm engineering team. Developers can now build, deploy, launch, and run typical sandbox workloads end-to-end on AArch64 servers.
- [Cube Sandbox v0.6.0: K8s Deployment, Volume Framework Lead Six Capabilities Toward Production](https://cubesandbox.com/blog/posts/2026-07-24-cubesandbox-v0.6.0-release.md): Today (July 24), Cube Sandbox v0.6.0 is officially released. This version merges 92 commits from 31 contributors, bringing six core features. Among them, K8s and Volume support are the two most requested by the community and the biggest highlights of this release.
- [From Sub-100ms Startup to Production-Grade Deployment: Why Tencent Cloud Rebuilt the Agent Sandbox](https://cubesandbox.com/blog/posts/2026-08-13-cubesandbox-agent-infra-interview.md): In early 2026, OpenClaw single-handedly sparked a local terminal Agent craze, and people began handing over file systems, browsers, email, terminals, and various account permissions to Agents. But behind the hype lies a risk more immediate than model hallucination. This article is InfoQ's exclusive interview with Jin Feng, head of Tencent Cloud's IaaS Frontier Technology Team, exploring Cube's evolution from Serverless infrastructure to Agent sandbox and the path from 'can run' to 'production-ready.'
- [Putting the Browser Inside the Agent Sandbox: Lexmount's Hands-On Experience with CubeSandbox](https://cubesandbox.com/blog/posts/2026-08-13-lexmount-browser-agent.md): Agent browser runtime is a 'composite workload.' It imposes four core hard requirements on AI Agent sandboxes: can outbound network reach the real internet, is the startup sequencing stable under batch creation, can per-sandbox runtime state be dynamically injected, and can real capacity be accurately perceived. The Lexmount team hit and resolved all four of these problems when integrating their browser runtime with CubeSandbox.
- [Running Hermes Agent in Cube Sandbox: Persistent Mounts, Skills Layering, and Network Recovery](https://cubesandbox.com/blog/posts/2026-08-20-hermes-agent.md): A resident Agent application needs the sandbox to remember not just task artifacts, but also the Agent's own configuration, conversation history, and a set of frequently invoked Skills. But sandboxes are inherently ephemeral — restarts, pauses, and migrations can zero out all of this state. This article shares the pitfalls and solutions from the Shanghai Yangpu New Energy AI team's migration of Hermes Studio onto CubeSandbox.
- [From Daytona to CubeSandbox: Lenovo's Cloud Agent Sandbox Migration and Evolution](https://cubesandbox.com/blog/posts/2026-08-20-lenovo-cloud-agent.md): Replacing a cloud Agent product's sandbox from Daytona to Cube looks like just swapping to a faster tool. But in practice, the migration changes three things: the sandbox deployment model (SaaS to self-hosted), the sandbox startup model (per-session rebuild to snapshot restore), and more fundamentally — the sandbox's role in the product architecture (from 'tool execution container' to 'independent runtime environment').
- [CubeSandbox v0.7.0: Cross-Machine Sandbox Migration and Smooth Cluster Evolution](https://cubesandbox.com/blog/posts/2026-08-28-cubesandbox-v0.7.0-release.md): In v0.6.0, we brought CubeSandbox into Kubernetes and delivered the E2B-compatible Volume framework. v0.7.0 addresses the two things production users care about most: letting sandboxes flow across machines, and letting upgrades no longer break existing assets.
- [Sandboxing Financial Research Agents: Hongze Info's Architecture and Selection Practice with CubeSandbox](https://cubesandbox.com/blog/posts/2026-08-28-horizon-insights.md): A single financial research Agent run can last tens of seconds to several minutes, reading research methodologies and data definitions, calling data APIs, running scripts, generating intermediate files, and having the model synthesize results. The sandbox carrying it can't just 'run a snippet of code' — it must contain the complete Agent loop in an isolated environment. This article introduces three core use cases of CubeSandbox in Hongze's 4as Agent.
- [Changelog](https://cubesandbox.com/changelog.md)
- [v0.1.0 — 2026.04.20](https://cubesandbox.com/changelog/v0.1.0.md)
- [v0.1.1 — 2026.04.24](https://cubesandbox.com/changelog/v0.1.1.md)
- [v0.1.2 — 2026.04.27](https://cubesandbox.com/changelog/v0.1.2.md)
- [v0.2.0 — 2026.05.07](https://cubesandbox.com/changelog/v0.2.0.md)
- [v0.2.1 — 2026.05.14](https://cubesandbox.com/changelog/v0.2.1.md)
- [v0.2.2 — 2026.05.18](https://cubesandbox.com/changelog/v0.2.2.md)
- [v0.3.0 — 2026.06.02](https://cubesandbox.com/changelog/v0.3.0.md)
- [v0.3.1 — 2026.06.04](https://cubesandbox.com/changelog/v0.3.1.md)
- [v0.4.0 — 2026.06.14](https://cubesandbox.com/changelog/v0.4.0.md)
- [v0.5.0 — 2026.07.03](https://cubesandbox.com/changelog/v0.5.0.md)
- [v0.5.1 — 2026.07.10](https://cubesandbox.com/changelog/v0.5.1.md)
- [v0.6.0 — 2026.07.24](https://cubesandbox.com/changelog/v0.6.0.md)
- [v0.7.0 — 2026.08.28](https://cubesandbox.com/changelog/v0.7.0.md)
- [Contributors](https://cubesandbox.com/contributors.md): Thank you to everyone who has contributed to Cube Sandbox.
- [Developer Docs](https://cubesandbox.com/dev.md)
- [Redis Key Naming Convention](https://cubesandbox.com/dev/redis-key-spec.md)
- [Authentication](https://cubesandbox.com/guide/authentication.md)
- [CLI Tools](https://cubesandbox.com/guide/cli-tools.md)
- [Cross-Node Snapshots (Pause / Resume / Snapshot)](https://cubesandbox.com/guide/cross-node-snapshot.md)
- [Cube 100 Program](https://cubesandbox.com/guide/cube100.md)
- [CubeMaster Scheduler Configuration](https://cubesandbox.com/guide/cubemaster-scheduler-config.md)
- [Development Environment (QEMU VM)](https://cubesandbox.com/guide/dev-environment.md)
- [Digital Assistant](https://cubesandbox.com/guide/digital-assistant.md)
- [Downloads & Releases](https://cubesandbox.com/guide/downloads.md)
- [HTTPS & Domain Resolution](https://cubesandbox.com/guide/https-and-domain.md)
- [Integrations](https://cubesandbox.com/guide/integrations.md)
- [Claude Code Integration Guide](https://cubesandbox.com/guide/integrations/claude-code.md)
- [LangChain Integration Guide](https://cubesandbox.com/guide/integrations/langchain.md)
- [OpenAI Agents SDK Integration Guide](https://cubesandbox.com/guide/integrations/openai-agents-sdk.md)
- [Pi Agent Integration Guide](https://cubesandbox.com/guide/integrations/pi-agent.md)
- [Architecture](https://cubesandbox.com/guide/kubernetes/architecture.md)
- [FAQ](https://cubesandbox.com/guide/kubernetes/faq.md)
- [Helm Install](https://cubesandbox.com/guide/kubernetes/install.md)
- [Upgrade](https://cubesandbox.com/guide/kubernetes/upgrade.md)
- [Sandbox Lifecycle](https://cubesandbox.com/guide/lifecycle.md)
- [Blog Maintenance](https://cubesandbox.com/guide/maintainer/blog.md)
- [Multi-Node Cluster Deployment](https://cubesandbox.com/guide/multi-node-deploy.md)
- [Network Hardening](https://cubesandbox.com/guide/network-hardening.md)
- [Egress Network Policy](https://cubesandbox.com/guide/network-policy.md)
- [Node Operations](https://cubesandbox.com/guide/node-operations.md)
- [Performance Benchmark](https://cubesandbox.com/guide/performance-benchmark.md)
- [Persistent Storage (Host Mount)](https://cubesandbox.com/guide/persistent-storage.md)
- [Sandbox Resource Metrics](https://cubesandbox.com/guide/resource-metrics.md)
- [Restrict Public Access](https://cubesandbox.com/guide/restrict-public-access.md)
- [Roadmap](https://cubesandbox.com/guide/roadmap.md)
- [Route-Aware Egress](https://cubesandbox.com/guide/route-aware-egress.md)
- [S3 Volumes](https://cubesandbox.com/guide/s3-volume.md)
- [Sandbox Logs](https://cubesandbox.com/guide/sandbox-logs.md)
- [Security Proxy](https://cubesandbox.com/guide/security-proxy.md)
- [Self-Build Deployment](https://cubesandbox.com/guide/self-build-deploy.md)
- [Service Management & Logs](https://cubesandbox.com/guide/service-management.md)
- [Snapshot, Rollback & Clone](https://cubesandbox.com/guide/snapshot-rollback-clone.md)
- [Soft-delete tombstone purge](https://cubesandbox.com/guide/soft-delete-purge.md)
- [Template Aliases](https://cubesandbox.com/guide/template-aliases.md)
- [Template Inspection and Request Preview](https://cubesandbox.com/guide/template-inspection-and-preview.md)
- [Templates Overview](https://cubesandbox.com/guide/templates.md)
- [Tencent Cloud Cluster Deployment (Terraform)](https://cubesandbox.com/guide/tencentcloud-terraform-deploy.md)
- [Troubleshooting](https://cubesandbox.com/guide/troubleshooting.md)
- [How to Find CubeSandbox Component Logs (cubecli logs and the Guest Kernel Log)](https://cubesandbox.com/guide/troubleshooting/component-log-locations.md)
- [Deployment Troubleshooting](https://cubesandbox.com/guide/troubleshooting/deployment.md)
- [Host Mounts Fail with Permission Denied](https://cubesandbox.com/guide/troubleshooting/host-mount-permissions.md)
- [Template Creation Times Out When the Sandbox CIDR Overlaps the LAN](https://cubesandbox.com/guide/troubleshooting/local-network-cidr-conflict.md)
- [Templates Troubleshooting](https://cubesandbox.com/guide/troubleshooting/templates.md)
- [Custom Template Images](https://cubesandbox.com/guide/tutorials/bring-your-own-image.md)
- [Examples](https://cubesandbox.com/guide/tutorials/examples.md)
- [Pre-warm a Service in a Template](https://cubesandbox.com/guide/tutorials/prewarm-template-service.md)
- [Go SDK](https://cubesandbox.com/guide/tutorials/sdk/go.md)
- [Node.js SDK](https://cubesandbox.com/guide/tutorials/sdk/nodejs.md)
- [Python SDK](https://cubesandbox.com/guide/tutorials/sdk/python.md)
- [Local and Remote Image Template Practice](https://cubesandbox.com/guide/tutorials/template-build-practice.md)
- [Creating Templates from OCI Images](https://cubesandbox.com/guide/tutorials/template-from-image.md)
- [Commit a Running Sandbox as a Template](https://cubesandbox.com/guide/tutorials/template-from-sandbox.md)
- [Use Cases](https://cubesandbox.com/guide/usecases.md)
- [Hermes Agent: Running a Resident Agent Platform in CubeSandbox](https://cubesandbox.com/guide/usecases/hermes-agent.md)
- [Hongze Info: Sandboxing Financial Research Agents](https://cubesandbox.com/guide/usecases/horizon-insights.md)
- [Lenovo Cloud Agent: Sandbox Migration from Daytona to CubeSandbox](https://cubesandbox.com/guide/usecases/lenovo-cloud-agent.md)
- [Lexmount AI: Putting the Browser Runtime Inside the Agent Sandbox](https://cubesandbox.com/guide/usecases/lexmount-browser-agent.md)
- [trpc-agent-go: A Secure Code Execution Backend Powered by Cube Sandbox](https://cubesandbox.com/guide/usecases/trpc-agent-go.md)
- [Volume Plugin Development](https://cubesandbox.com/guide/volume-plugin.md)
- [WebUI Dashboard](https://cubesandbox.com/guide/webui.md)
- [Untitled](https://cubesandbox.com/index.md)

## 简体中文

- [简介](https://cubesandbox.com/zh/guide/introduction.md)
- [快速开始](https://cubesandbox.com/zh/guide/quickstart.md)
- [PVM 部署](https://cubesandbox.com/zh/guide/pvm-deploy.md)
- [裸金属 / 物理机部署](https://cubesandbox.com/zh/guide/bare-metal-deploy.md)
- [Kubernetes 部署](https://cubesandbox.com/zh/guide/kubernetes.md)
- [Untitled](https://cubesandbox.com/zh.md)
- [关于我们](https://cubesandbox.com/zh/about-us.md): 腾讯云 IaaS 前沿技术团队介绍。
- [CubeVS 网络模型](https://cubesandbox.com/zh/architecture/network.md)
- [架构概览](https://cubesandbox.com/zh/architecture/overview.md)
- [博客](https://cubesandbox.com/zh/blog.md)
- [欢迎来到 Cube Sandbox 博客](https://cubesandbox.com/zh/blog/posts/2026-05-15-welcome.md): 我们开通博客栏目，用来发布版本说明、技术解读以及围绕 Cube Sandbox 的社区故事。
- [在 AWS EC2 嵌套虚拟化实例上部署 Cube Sandbox 的实践与踩坑](https://cubesandbox.com/zh/blog/posts/2026-05-17-aws-nested-virt-cube-deploy.md): 记录在 AWS EC2 嵌套虚拟化实例（c8i.2xlarge）上部署 Cube Sandbox 的完整过程：环境准备、三个必需补丁（Cubelet、CubeShim、Guest 镜像）、服务启动、模板创建，以及通过 E2B 兼容 SDK 创建 sandbox 的实操与问题记录。
- [Cube Sandbox v0.2.2：E2B 兼容更进一步，高频踩坑集中收敛](https://cubesandbox.com/zh/blog/posts/2026-05-19-cubesandbox-v0.2.2-release.md): 继 v0.2.0 之后，Cube Sandbox 在 5 月 18 日发布了 v0.2.2。本次更新把 E2B 兼容性从 SDK 层延伸到端口协议层，集中修复了 v0.1.x 以来用户反馈的 7 个高频稳定性问题，并完成了 0.2 系列首批 CVE 处置。
- [Cube Sandbox 快速上手：把普通云服务器 PVM 部署前的环境一次盘清楚](https://cubesandbox.com/zh/blog/posts/2026-05-22-cube-pvm-on-opencloudos9.md): 一份在普通云服务器上、基于 OpenCloudOS 9，把 Cube Sandbox PVM 部署所需的前置环境一次性盘清楚的实操指南：操作系统选型、内核版本、依赖准备，到一键部署前的所有准备步骤。
- [从 Serverless 到 Agent：Cube 系统的一些设计思考](https://cubesandbox.com/zh/blog/posts/2026-05-22-from-serverless-to-agent.md): 从服务 Serverless 场景多年打磨而来的 Cube 系统，如何把"高密、高弹性、高并发、强隔离"的能力延展到 Agent 时代。本文系统性地梳理了 Cube 的核心设计——分布式调度+单机装箱、资源池化、前后端解耦、快照恢复+lazy load、资源复用、全栈锁优化、原生安全、复用虚拟机资源——以及面向 Agent 场景的扩展：极速代码执行、Agentic RL、镜像加速系统、基于快照的分支克隆、事件级快照与回滚。
- [CubeSandbox 核心操作性能基准测试报告](https://cubesandbox.com/zh/blog/posts/2026-06-01-cubesandbox-perf-benchmark.md): 本文公布 CubeSandbox 在真实裸金属节点上的性能基准测试数据，涵盖基于 Template 创建沙箱（冷启动延迟、并发扩展、单机密度）以及 Snapshot 相关操作（Snapshot 制作、基于 Snapshot 启动、Rollback、Clone）。每节附完整复现命令，读者可按步骤在自己的环境中复现测试。
- [CubeSandbox 核心操作性能基准测试报告（PVM 云服务器）](https://cubesandbox.com/zh/blog/posts/2026-06-03-cubesandbox-perf-benchmark-pvm.md): 本文公布 CubeSandbox 在腾讯云 SA9.4XLARGE32 标准型云服务器（PVM 内核）上的性能基准测试数据，涵盖基于 Template 创建沙箱（冷启动延迟、并发扩展、单机密度）以及 Snapshot 相关操作（Snapshot 制作、基于 Snapshot 启动、Rollback、Clone、Pause/Resume）。每节附完整复现命令，读者可按步骤在自己的环境中复现测试。
- [Cube Sandbox v0.3.0：让 AI Agent 拥有「时光机」和「分身术」](https://cubesandbox.com/zh/blog/posts/2026-06-03-cubesandbox-v0.3.0-snapshot.md): 在主流 AI Agent 架构中，沙箱服务承担着"安全运行时"的角色。Cube Sandbox v0.3.0 在 22 位贡献者合入的 82 个 commits 之上，完成了一次面向 Agent 高并发、长链路与强化学习场景的关键架构升级——围绕 snapshot / clone / rollback 三组接口，把"环境复制"和"出错恢复"从分钟级压到毫秒级。
- [让传统软件服务适配 Agent：从快速创建到分支、克隆与回滚](https://cubesandbox.com/zh/blog/posts/2026-06-17-cubesandbox-agent-friendly-service.md): 当软件服务的使用对象从人变为 Agent，对服务的要求发生了根本变化——创建不再是运维动作，而是推理和执行循环的一部分。Neon 被 Databricks 以 10 亿美金收购，印证了这条技术路线的价值。Cube Sandbox 把"极速创建、分支克隆、状态回滚"做成通用运行环境能力，让任何传统软件服务几乎零代码修改即可变为 Agent 友好的服务。
- [Cube Sandbox v0.4.0：从隔离 Agent 到治理 Agent](https://cubesandbox.com/zh/blog/posts/2026-06-17-cubesandbox-v0.4.0-release.md): 继 v0.3.0 快照/克隆/回滚三件套之后，v0.4.0 由 15 位贡献者合入 58 个 commits，核心解决三个问题：出站治理（CubeEgress L7 代理 + 凭据注入 + 域名过滤 + 访问审计）、可观测性（容器日志转发 + vsock 通道）、一致性（节点组件版本矩阵 + 模板兼容性对账）。同时带来网络 P99 延迟降 41%、模板构建峰值磁盘从 4.2 倍降到 1.2 倍。
- [Cube Sandbox 安全沙箱网络技术解析](https://cubesandbox.com/zh/blog/posts/2026-06-23-cubesandbox-network-deep-dive.md): AI Agent 赋予机器自主执行能力，也打开了数据泄露与凭证滥用的潘多拉魔盒。CubeSandbox 以 KVM MicroVM 隔离为基座、eBPF 内核态网络为骨架、L7 代理深度检查为护盾，构建了一套从虚拟交换到应用层审计的端到端网络安全体系。本文逐层拆解 CubeVS、CubeProxy、CubeEgress 等核心组件的设计与实现，揭示其如何在开放执行与安全可控之间取得平衡。
- [几十 GiB 快照秒回、克隆“零拷贝”：Cube 快照克隆回滚技术原理深层揭秘](https://cubesandbox.com/zh/blog/posts/2026-06-25-cubesandbox-snapshot-clone-rollback-deep-dive.md): 磁盘快照秒回、内存快照只写少量页、克隆零拷贝——这三个看似魔法的现象背后，是 XFS reflink、/proc/pagemap 匿名页检测与 soft-dirty bit 三套内核机制在协作。本文层层拆解 v0.3.0 快照 / 克隆 / 回滚的底层原理。
- [Cube v0.5.0发布：自动暂停 · ARM 支持· 一键集群部署，把沙箱送进生产](https://cubesandbox.com/zh/blog/posts/2026-07-03-cubesandbox-v0.5.0-release.md): 如果说 Cube Sandbox v0.3.0 解决的是"快"（毫秒级的快照 / 克隆 / 回滚），v0.4.0 解决的是"治理"（L7 出站管控 + 可观测性 + 集群一致性），那么 v0.5.0 想解决的是——"稳、省、广"。v0.5.0 由 26 位贡献者合入 116 个 commits，带来四大核心特性：AutoPause/AutoResume 沙箱生命周期自动化、ARM64 全栈原生支持、腾讯云 Terraform 一键集群部署、网络安全性增强。
- [Cube Sandbox正式支持Arm架构！腾讯云与Arm联手解锁Agent多架构算力](https://cubesandbox.com/zh/blog/posts/2026-07-08-cubesandbox-arm-support.md): 7月3日，由腾讯云开源的 AI Agent 安全沙箱 Cube Sandbox v0.5.0 正式发布。Arm 架构原生支持作为核心特性之一，已在 Arm 工程团队的重点投入下合入开源主线。开发者现在可以在 AArch64 服务器上，实现从原生构建、部署、启动到运行典型沙箱负载的完整流程。
- [Cube Sandbox v0.6.0：K8s 部署、Volume 框架领衔，六大能力全面走向生产](https://cubesandbox.com/zh/blog/posts/2026-07-24-cubesandbox-v0.6.0-release.md): 今天（7月24日），Cube Sandbox v0.6.0 正式发布。这一版共合入 92 个提交，来自 31 位贡献者，带来六大核心特性。其中，K8s 与 Volume 支持是社区呼声最高的两项，也是本次发布版本的最大亮点。
- [从亚百毫秒级启动到生产级部署，腾讯云为何重构 Agent 沙箱？](https://cubesandbox.com/zh/blog/posts/2026-08-13-cubesandbox-agent-infra-interview.md): 2026 年初，OpenClaw 以一己之力掀起了本地终端 Agent 热潮，人们开始习惯把文件系统、浏览器、邮件、终端，以及各种账号权限交给 Agent。但「养虾」的背后，潜藏着比模型幻觉更直接的风险。本文系 InfoQ 对腾讯云 IaaS 前沿技术团队负责人金峰的独家采访，从 Cube 的 Serverless 技术起源出发，探讨了 Agent 沙箱从「能运行」到「生产级可用」的演进路径。
- [把浏览器搬进 Agent 沙箱：Lexmount 在 CubeSandbox 上的一线实战](https://cubesandbox.com/zh/blog/posts/2026-08-13-lexmount-browser-agent.md): Agent 浏览器运行时是一个复合工作负载。它对 AI Agent 沙箱的运行有四个核心层面的硬需求：出站网络能否连到真实互联网、批量拉起时的启动时序稳不稳、每个沙箱的运行时状态能否被动态注入、真实容量能不能被准确感知。Lexmount 团队在把浏览器运行时接入 Cube Sandbox 的实践中，逐一碰上并解决了这四个问题。
- [在 Cube Sandbox 中运行 Hermes Agent：从持久化挂载、Skills 分层到网络与恢复故障的工程实践](https://cubesandbox.com/zh/blog/posts/2026-08-20-hermes-agent.md): 一个常驻 Agent 应用需要沙箱记住的不只是任务产物，还包括 Agent 自身的配置、历史会话、以及一批被反复调用的 Skills。而沙箱本身天然是易失的——重启、暂停、迁移都可能让这些状态归零。本文分享上海阳璞新能源科技 AI 团队在将 Hermes Studio 迁上 Cube Sandbox 的过程中踩过的坑和落地方案。
- [从 Daytona 到 Cube Sandbox：联想云端 Agent 的沙箱迁移与演进](https://cubesandbox.com/zh/blog/posts/2026-08-20-lenovo-cloud-agent.md): 把一个云端 Agent 产品的沙箱从 Daytona 换成 Cube，看起来只是换了一个更快的工具。但真正做下来会发现，迁移会改变三件事：沙箱的部署形态（SaaS → 自托管）、沙箱的启动模型（每次会话重建 → 快照恢复）、以及更本质的——沙箱在产品架构中的角色（从「工具执行容器」到「独立运行环境」）。
- [CubeSandbox v0.7.0 发布：沙箱跨机流动，集群平滑演进](https://cubesandbox.com/zh/blog/posts/2026-08-28-cubesandbox-v0.7.0-release.md): 在 v0.6.0 中，我们把 CubeSandbox 送进了 Kubernetes，也交付了兼容 E2B 的 Volume 框架。v0.7.0 解决了生产用户最在意的两个问题：沙箱跨机器流动，以及升级不再打断已有资产。
- [金融投研 Agent 沙箱化：弘则信息基于 CubeSandbox 的选型与架构实践](https://cubesandbox.com/zh/blog/posts/2026-08-28-horizon-insights.md): 金融投研 Agent 的一次 run，往往要持续几十秒到数分钟，期间会读取研究方法和数据定义、调用数据接口、运行脚本、生成中间文件、再由模型整理结果。承载它的沙箱不能只是跑一段代码，而是要把完整的 Agent 循环放进隔离环境。本文介绍 CubeSandbox 在弘则 4as Agent 中的三个核心使用场景。
- [更新日志](https://cubesandbox.com/zh/changelog.md)
- [v0.1.0 — 2026.04.20](https://cubesandbox.com/zh/changelog/v0.1.0.md)
- [v0.1.1 — 2026.04.24](https://cubesandbox.com/zh/changelog/v0.1.1.md)
- [v0.1.2 — 2026.04.27](https://cubesandbox.com/zh/changelog/v0.1.2.md)
- [v0.2.0 — 2026.05.07](https://cubesandbox.com/zh/changelog/v0.2.0.md)
- [v0.2.1 — 2026.05.14](https://cubesandbox.com/zh/changelog/v0.2.1.md)
- [v0.2.2 — 2026.05.18](https://cubesandbox.com/zh/changelog/v0.2.2.md)
- [v0.3.0 — 2026.06.02](https://cubesandbox.com/zh/changelog/v0.3.0.md)
- [v0.3.1 — 2026.06.04](https://cubesandbox.com/zh/changelog/v0.3.1.md)
- [v0.4.0 — 2026.06.14](https://cubesandbox.com/zh/changelog/v0.4.0.md)
- [v0.5.0 — 2026.07.03](https://cubesandbox.com/zh/changelog/v0.5.0.md)
- [v0.5.1 — 2026.07.10](https://cubesandbox.com/zh/changelog/v0.5.1.md)
- [v0.6.0 — 2026.07.24](https://cubesandbox.com/zh/changelog/v0.6.0.md)
- [v0.7.0 — 2026.08.28](https://cubesandbox.com/zh/changelog/v0.7.0.md)
- [贡献者](https://cubesandbox.com/zh/contributors.md): 感谢每一位为 Cube Sandbox 做出贡献的人。
- [开发者文档](https://cubesandbox.com/zh/dev.md)
- [Redis Key 命名规范](https://cubesandbox.com/zh/dev/redis-key-spec.md)
- [鉴权配置](https://cubesandbox.com/zh/guide/authentication.md)
- [命令行工具](https://cubesandbox.com/zh/guide/cli-tools.md)
- [跨机快照（Pause / Resume / Snapshot）](https://cubesandbox.com/zh/guide/cross-node-snapshot.md)
- [Cube 100 计划](https://cubesandbox.com/zh/guide/cube100.md)
- [CubeMaster 调度器配置参考](https://cubesandbox.com/zh/guide/cubemaster-scheduler-config.md)
- [开发环境（QEMU 虚拟机）](https://cubesandbox.com/zh/guide/dev-environment.md)
- [数字助手](https://cubesandbox.com/zh/guide/digital-assistant.md)
- [下载与 Release 说明](https://cubesandbox.com/zh/guide/downloads.md)
- [HTTPS 证书与域名解析](https://cubesandbox.com/zh/guide/https-and-domain.md)
- [生态集成](https://cubesandbox.com/zh/guide/integrations.md)
- [Claude Code 集成指南](https://cubesandbox.com/zh/guide/integrations/claude-code.md)
- [LangChain 集成指南](https://cubesandbox.com/zh/guide/integrations/langchain.md)
- [OpenAI Agents SDK 集成指南](https://cubesandbox.com/zh/guide/integrations/openai-agents-sdk.md)
- [Pi Agent 集成指南](https://cubesandbox.com/zh/guide/integrations/pi-agent.md)
- [架构说明](https://cubesandbox.com/zh/guide/kubernetes/architecture.md)
- [常见问题](https://cubesandbox.com/zh/guide/kubernetes/faq.md)
- [Helm 安装](https://cubesandbox.com/zh/guide/kubernetes/install.md)
- [升级](https://cubesandbox.com/zh/guide/kubernetes/upgrade.md)
- [沙箱生命周期](https://cubesandbox.com/zh/guide/lifecycle.md)
- [博客维护](https://cubesandbox.com/zh/guide/maintainer/blog.md)
- [多机集群部署](https://cubesandbox.com/zh/guide/multi-node-deploy.md)
- [网络加固](https://cubesandbox.com/zh/guide/network-hardening.md)
- [出网网络策略](https://cubesandbox.com/zh/guide/network-policy.md)
- [节点相关操作](https://cubesandbox.com/zh/guide/node-operations.md)
- [性能测试](https://cubesandbox.com/zh/guide/performance-benchmark.md)
- [持久化存储（Host Mount）](https://cubesandbox.com/zh/guide/persistent-storage.md)
- [沙箱资源指标](https://cubesandbox.com/zh/guide/resource-metrics.md)
- [限制公开访问](https://cubesandbox.com/zh/guide/restrict-public-access.md)
- [路线图](https://cubesandbox.com/zh/guide/roadmap.md)
- [路由感知出网](https://cubesandbox.com/zh/guide/route-aware-egress.md)
- [S3 持久卷（S3 Volume）](https://cubesandbox.com/zh/guide/s3-volume.md)
- [沙箱日志](https://cubesandbox.com/zh/guide/sandbox-logs.md)
- [安全代理](https://cubesandbox.com/zh/guide/security-proxy.md)
- [本地构建部署](https://cubesandbox.com/zh/guide/self-build-deploy.md)
- [服务管理与日志](https://cubesandbox.com/zh/guide/service-management.md)
- [快照、回滚与克隆](https://cubesandbox.com/zh/guide/snapshot-rollback-clone.md)
- [软删除墓碑定时清理](https://cubesandbox.com/zh/guide/soft-delete-purge.md)
- [模板别名](https://cubesandbox.com/zh/guide/template-aliases.md)
- [模板检查与请求预览](https://cubesandbox.com/zh/guide/template-inspection-and-preview.md)
- [模板概览 (Templates)](https://cubesandbox.com/zh/guide/templates.md)
- [腾讯云集群部署（Terraform）](https://cubesandbox.com/zh/guide/tencentcloud-terraform-deploy.md)
- [故障排障](https://cubesandbox.com/zh/guide/troubleshooting.md)
- [如何查看 CubeSandbox 各组件日志（含 cubecli logs 与 guest kernel log）](https://cubesandbox.com/zh/guide/troubleshooting/component-log-locations.md)
- [部署相关排障](https://cubesandbox.com/zh/guide/troubleshooting/deployment.md)
- [Host Mount 写入时报 Permission Denied](https://cubesandbox.com/zh/guide/troubleshooting/host-mount-permissions.md)
- [沙箱网段和局域网冲突导致创建模板超时](https://cubesandbox.com/zh/guide/troubleshooting/local-network-cidr-conflict.md)
- [模板相关排障](https://cubesandbox.com/zh/guide/troubleshooting/templates.md)
- [自定义模板镜像](https://cubesandbox.com/zh/guide/tutorials/bring-your-own-image.md)
- [示例项目](https://cubesandbox.com/zh/guide/tutorials/examples.md)
- [预热模板服务](https://cubesandbox.com/zh/guide/tutorials/prewarm-template-service.md)
- [Go SDK](https://cubesandbox.com/zh/guide/tutorials/sdk/go.md)
- [Node.js SDK](https://cubesandbox.com/zh/guide/tutorials/sdk/nodejs.md)
- [Python SDK](https://cubesandbox.com/zh/guide/tutorials/sdk/python.md)
- [本地镜像 & 远程镜像实战文档](https://cubesandbox.com/zh/guide/tutorials/template-build-practice.md)
- [从 OCI 镜像制作模板](https://cubesandbox.com/zh/guide/tutorials/template-from-image.md)
- [将运行中的沙箱提交为模板](https://cubesandbox.com/zh/guide/tutorials/template-from-sandbox.md)
- [应用案例](https://cubesandbox.com/zh/guide/usecases.md)
- [Hermes Agent：在 Cube Sandbox 中运行常驻 Agent 平台](https://cubesandbox.com/zh/guide/usecases/hermes-agent.md)
- [弘则信息：金融投研 Agent 沙箱化实践](https://cubesandbox.com/zh/guide/usecases/horizon-insights.md)
- [Lenovo Cloud Agent：从 Daytona 到 CubeSandbox 的沙箱迁移](https://cubesandbox.com/zh/guide/usecases/lenovo-cloud-agent.md)
- [Lexmount AI：把浏览器运行时搬进 Agent 沙箱](https://cubesandbox.com/zh/guide/usecases/lexmount-browser-agent.md)
- [trpc-agent-go：基于 Cube Sandbox 的安全代码执行后端](https://cubesandbox.com/zh/guide/usecases/trpc-agent-go.md)
- [Volume 插件开发指南](https://cubesandbox.com/zh/guide/volume-plugin.md)
- [WebUI 控制台](https://cubesandbox.com/zh/guide/webui.md)