System Specifications
| Property | Value |
|---|---|
| Operating System | Ubuntu Linux (x86-64) |
| User Account | sandbox with passwordless sudo |
| Default Resources | 2 vCPU, 7 GB RAM |
| Container Type | Firecracker microVM |
| Public Port | 8080 only |
| Working Directory | /home/sandbox/ |
Lifecycle
Startup
A fresh Ubuntu environment starts on first terminal command in a session.Auto-Termination
| Setting | Timeout |
|---|---|
| Default | 1 hour after last execution |
| Persist Sandbox enabled | 24 hours after last execution |
Resume
On next command after termination: a new sandbox starts, files restore from session state, previously installed packages require reinstallation, environment variables require reactivation.Manual Reset
The/reset-sandbox command forces immediate termination with a confirmation prompt.
Default Software
| Category | Available |
|---|---|
| Python | System Python 3.x, default virtualenv at ./user_venv |
| Compilers | GCC, system development tools |
| Package Managers | apt-get (system), pip (Python), npm/pnpm (JavaScript) |
File Synchronization
Working Directory
Session files mount to/home/sandbox/. A file at example/test.txt in the session maps to /home/sandbox/example/test.txt.
Synchronized File Types
To sandbox: All tracked file changes sync immediately (eager synchronization). From sandbox to session:| Type | Synchronized |
|---|---|
| Text-based source code | Yes |
| Configuration files (JSON, YAML, TOML) | Yes |
| Documentation (Markdown, text) | Yes |
| PNG, JPG, WebP, GIF, PDF | Yes |
| Build artifacts | No |
| Dependencies (node_modules, .venv) | No |
| Large binaries | No |
| Temporary files | No |
| Log directories | No |
Synchronization Control
.gitignore rules are respected. Files outside /home/sandbox/ are not synchronized.
Live Reload
Running servers see file changes instantly via eager synchronization.Network
Inbound Access
| Port | Access |
|---|---|
| 8080 | Public via preview URL |
| All others | Internal only (localhost) |
\{hash\}.preview.igent.ai. Available as $PUBLIC_HOSTNAME environment variable.
Outbound Access
Full internet access: HTTPS, databases, APIs, external services.Terminal Windows
| Property | Behavior |
|---|---|
| Creation | On first use |
| Persistence | Environment variables and working directory persist across commands in same window |
| Auto-close | After 600 seconds of inactivity |
| Reuse | Running a new command cancels the previous command in that window |
Custom Sandbox Types
Custom Resources
Thecpu_count parameter accepts values 1-16. The memory_gb parameter accepts values 1-64. Custom resource sandboxes run Ubuntu.
GPU
Thegpu_type parameter accepts: A10G, A100, T4, L4, H100. The gpu_count parameter accepts values 1-8. GPU parameters cannot be combined with SSH parameters.
Privileged
Theprivileged parameter, when true, enables Docker and containerization. Privileged sandboxes run Ubuntu. The privileged parameter cannot be combined with SSH or GPU parameters.
Docker Image
Thedocker_image parameter (e.g., python:3.11) runs commands inside the specified container. Requires privileged=true. Files are mounted at /workspace.
SSH
Thessh_connection parameter (format: username@host:port) and ssh_private_key parameter connect to external systems. SSH parameters cannot be combined with resource or GPU parameters.
Constraints
| Constraint | Detail |
|---|---|
| No nested containers | Docker is unavailable in the default sandbox; privileged mode is required |
| No reboot | Rebooting terminates the session |
| No global process kill | Support services run alongside user processes |
| Single public port | Only 8080 is exposed publicly |
| Ephemeral state | Installed packages, environment variables, and running processes do not persist across sandbox restarts |
Environment Variables
System Variables
| Variable | Description |
|---|---|
PUBLIC_HOSTNAME | Public preview hostname for the sandbox |
Activated Secrets
Secrets activated via the/secrets command become environment variables. They are session-scoped, never logged, and automatically cleaned up on session end.