Would love to see sandboxd added — it's the self-hosted open-source option with Docker hardening, built-in coding agents (Claude Code, OpenCode), and live preview URLs. https://github.com/tastyeffectco/sandboxd
There are plenty of OSS solutions available for your needs. Do you need real isolation, or is Docker hardening sufficient? If hardening is suddicient check out https://github.com/tastyeffectco/sandboxd/ which i'm using internaly for so many use cases
As a Moroccan who recently moved to the Zurich area of Switzerland with my Swiss wife and kids, we found ourselves settling here for medical reasons and rediscovering a new way of life.
When I see this debate, I mostly feel confused. I keep thinking about us as human beings and what drives us, what makes us fear others, or simply makes us uncomfortable. I think this is, and always will be, a human trait: fear of losing what we believe we deserve more than others, fear of change, and fear of competition (even when there isn't any).
And I agree—Switzerland is one of the most beautiful countries in the world, with some of the kindest individuals I've ever met.
This project takes the Docker route instead of Firecracker — each container drops all capabilities, runs no-new-privileges, read-only rootfs, per-sandbox memory/PID limits, isolated networks. but! Not kernel-level separation like microVM.
depending on use cases but its enough for most and way simpler to operate and maintain.
If you need stronger isolation, the other replies in this thread mention (gVisor on k8s) Depends on your threat model and how much infra complexity you want to manage.
Yes, but not fully!
each sandbox have all linux capabilities! runs with no-new-privileges, a read-only rootfs! capped limits on PID and Memory, network isolated per design!
all that said! this is not a VM isolation level like Firecracker for example, but quit enough for most use cases for early stage products or entreprise internal products
For a 8 CPU, 12GB Ram you can run app to 10 concurrents sandboxes that do heavy builds! the project itself is not ram/cpu heavy at all! depending on what you will run inside ! that was one of the main points why i didnt chose to go for real kvm isolation.
i would just say if its for an early stage product got for it! at scale reconsider security and isolation layers
upilote (mellosouls): your second reading is correct.
This is not a Lovable competitor, and it's not all of upilote.
upilote is the product: chat → agent builds → live preview.
This repo is just the infrastructure layer underneath it that we extracted and open-sourced under MIT. It handles one container per project, preview URLs, running agents, sleeping when idle, waking on request, persistence, and recovery after reboots.
For us, it simplified a lot of things. Instead of managing all that logic ourselves, it became: submit a task and stream events back.