Tencent Cloud CubeSandbox
https://github.com/tencentcloud/CubeSandbox
CubeSandbox is an open-source (Apache-2.0) infrastructure layer for executing code on behalf of AI agents. Each sandbox runs inside a hardware-isolated KVM microVM built on RustVMM, with its own Linux kernel, and exposes create/pause/resume/snapshot/clone/rollback/kill lifecycle operations over an E2B-compatible REST API. It is deployed by developers self-hosting on bare metal, Kubernetes, or Tencent Cloud, and is used to safely run agent-generated or untrusted code.
| Pricing model | Open-source/self-hosted software; no product-level billing model published. Users pay their underlying infrastructure provider. |
|---|---|
| Pricing The headline compute price as the provider states it. Sorting ranks prices stated per vCPU over time, converted to hourly. Other pricing models sort after, unranked. | No published headline rate (open-source/self-hosted software) |
| Free while idle Whether a stopped, paused, or sleeping sandbox costs nothing. | – |
| Elastic Resources flex with what the sandbox actually uses, and the bill follows: yes when the provider bills on active or observed use, no when capacity is reserved or allocated and billed while it runs. | – |
| Memory snapshots Whether RAM state survives a pause and resume, not just disk. | ✓ |
| Wake on request Whether a stopped sandbox wakes automatically on inbound traffic. | ✓ |
| Start / resume Typical time from create or resume to running. Sorting ranks stated times, converted to seconds; claims with no figure sort after, unranked. | <60 ms average (bare metal; ~60 ms single concurrency, avg 67 ms under 50 concurrent creations) |
| Max runtime The longest a sandbox may run. | – |
| Isolation The isolation technology between sandboxes. | KVM MicroVM via RustVMM (each sandbox runs its own Linux kernel; hardware-isolated from the host and from other sandboxes) |
| GPUs Whether GPU instances are available for sandboxes. | – |
| Docker Whether Docker containers can run inside the sandbox. | ✕ |
| SDKs | Python, TypeScript, Go |
✓ yes · ✕ no · – no cited public fact.
CubeSandbox is open-source (Apache-2.0) software meant to be self-hosted on bare metal, Kubernetes, or Tencent Cloud (via Terraform); it is not a managed SaaS with published per-resource pricing. Root filesystem templates are built FROM Dockerfiles via Buildkit, but the running sandbox is a hardware-isolated KVM MicroVM, not a container.
Sources
- https://github.com/tencentcloud/CubeSandbox
- https://github.com/tencentcloud/CubeSandbox/blob/master/docs/architecture/overview.md
- https://github.com/tencentcloud/CubeSandbox/blob/master/docs/index.md
- https://github.com/tencentcloud/CubeSandbox/blob/master/docs/guide/templates.md
- https://github.com/tencentcloud/CubeSandbox/tree/master/sdk/python
- https://github.com/tencentcloud/CubeSandbox/tree/master/sdk/node
- https://github.com/tencentcloud/CubeSandbox/tree/master/sdk/go
- https://pypi.org/project/cubesandbox/
- https://github.com/tencentcloud/CubeSandbox/blob/master/docs/guide/webui.md
- https://github.com/tencentcloud/CubeSandbox/blob/master/docs/guide/quickstart.md
- https://github.com/TencentCloud/CubeSandbox/blob/master/docs/guide/quickstart.md
- https://github.com/TencentCloud/CubeSandbox/blob/master/docs/index.md
- https://raw.githubusercontent.com/TencentCloud/CubeSandbox/master/sdk/python/README.md
- https://raw.githubusercontent.com/TencentCloud/CubeSandbox/master/sdk/go/README.md
- https://github.com/TencentCloud/CubeSandbox/releases
- https://raw.githubusercontent.com/TencentCloud/CubeSandbox/master/README.md
- https://raw.githubusercontent.com/TencentCloud/CubeSandbox/master/docs/architecture/overview.md
- https://raw.githubusercontent.com/TencentCloud/CubeSandbox/master/docs/blog/posts/2026-06-01-cubesandbox-perf-benchmark.md
Last verified 2026-08-06. Corrections land through the update log.