六大Agent沙箱引擎：隔离·持久·极速三栈实测

from e2b_code_interpreter import Sandbox

# 创建临时沙箱
sbx = Sandbox(timeout=300)

# Agent生成的任意代码安全执行
execution = sbx.run_code("""
import pandas as pd
df = pd.read_csv("https://example.com/data.csv")
print(df.describe())
""")

# 获取执行结果
print(execution.stdout)
print(execution.error)  # 错误也被安全捕获

# 沙箱自动销毁，无残留
sbx.close()

# Zeroboot API调用——亚毫秒级沙箱启动
curl -X POST https://api.zeroboot.dev/v1/exec \
  -H 'Content-Type: application/json' \
  -H 'Authorization: Bearer zb_demo_hn2026' \
  -d '{"code":"import numpy as np; print(np.random.rand(3))"}'

from zeroboot import Sandbox

# 每个沙箱仅占265KB内存
sb = Sandbox("zb_live_your_key")
result = sb.run("import numpy as np; print(np.random.rand(3))")

// Rust SDK - 直接在代码中启动microVM
use microsandbox::Sandbox;

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let sandbox = Sandbox::builder("my-sandbox")
        .image("python")
        .cpus(1)
        .memory(512)
        .create()
        .await?;

    // 安全执行Agent生成的代码
    let output = sandbox
        .exec("python", ["-c", "print('Hello from microVM!')"])
        .await?;

    println!("{}", output.stdout()?);
    sandbox.stop_and_wait().await?;
    Ok(())
}

# Python SDK
import asyncio
from microsandbox import Sandbox

async def main():
    sandbox = await Sandbox.create(
        name="agent-workspace",
        image="python:3.12",
        memory_mb=512
    )

    # 密钥在网络层透明替换，沙箱内不可见
    result = await sandbox.exec(
        "curl -H 'Authorization: Bearer $API_KEY' https://api.example.com/data"
    )
    # $API_KEY 在沙箱内是占位符，实际请求由宿主机网络层注入真值

    await sandbox.stop()

// Sprites JavaScript SDK
import { SpritesClient } from '@fly/sprites';

const client = new SpritesClient(process.env.SPRITES_TOKEN);

// 创建持久化沙箱
const sprite = client.sprite('my-agent-workspace');

// 第一轮：安装依赖
await sprite.exec('pip install pandas numpy scikit-learn');

// 检查点：保存当前状态
await sprite.checkpoint('deps-installed');

// 第二轮：运行分析
const { stdout } = await sprite.exec('python analyze.py');
console.log(stdout);

// 如果出错，回滚到检查点
await sprite.restore('deps-installed');

// 每个Sprite有独立URL，可对外提供HTTP服务
await sprite.exec('python -m http.server 8080');

# CLI操作
sprite create my-sprite
sprite exec -s my-sprite "pip install -r requirements.txt"
sprite console -s my-sprite  # 进入交互式终端
sprite checkpoint -s my-sprite -n "before-refactor"
sprite restore -s my-sprite -n "before-refactor"  # 回滚

# Daytona沙箱创建
from daytona import Daytona

daytona = Daytona()
sandbox = daytona.create()

# Agent在沙箱中执行代码
response = sandbox.process.code_run('print("Hello from Daytona!")')
print(response.result)

# Computer Use - Agent控制虚拟桌面
desktop = sandbox.desktop
screenshot = desktop.screenshot()  # 截取桌面
desktop.click(x=500, y=300)       # 点击操作
desktop.type_text("Hello World")  # 键入文本

# 持久化工作空间
sandbox.files.upload("/app/config.yaml", config_content)
# 下次连接同一沙箱，文件仍然存在

# OpenSandbox协议定义示例
apiVersion: sandbox.alibaba.com/v1
kind: SandboxTemplate
spec:
  runtime: docker  # 或 kata-containers
  image: python:3.12-slim
  resources:
    cpu: "2"
    memory: "4Gi"
  network:
    egress: allow-specific
    allowedHosts:
      - api.openai.com
      - pypi.org
  security:
    readOnlyRootFS: true
    dropCapabilities: ["ALL"]
    seccompProfile: runtime/default

// Java SDK - K8s原生部署
OpenSandbox sandbox = OpenSandbox.builder()
    .template("python-agent")
    .namespace("production")
    .kubernetesClient(k8sClient)  // 直接使用K8s客户端
    .build();

SandboxSession session = sandbox.create();
ExecutionResult result = session.execute("python train_model.py");

graph TB
    subgraph "硬件虚拟化层（最强隔离）"
        ZB["Zeroboot<br/>Firecracker CoW<br/>0.79ms派生"]
        E2B["E2B<br/>Firecracker microVM<br/>150ms启动"]
        SP["Sprites.dev<br/>Firecracker microVM<br/>1-12s启动 + 检查点"]
        MS["Microsandbox<br/>libkrun microVM<br/>187ms本地启动"]
    end

    subgraph "容器隔离层（最快启动）"
        DAY["Daytona<br/>Docker容器<br/>27-90ms创建<br/>+Computer Use"]
        OS["OpenSandbox<br/>Docker/Kata<br/>K8s原生编排"]
    end

    subgraph "持久化能力谱"
        EPHE["临时型<br/>E2B·Zeroboot"]
        PERS["持久型<br/>Daytona·Sprites·Microsandbox"]
        CONF["可配置<br/>OpenSandbox"]
    end

    subgraph "部署模型"
        CLOUD["纯托管<br/>E2B·Sprites"]
        HYBRID["托管+自托管<br/>Daytona·Zeroboot"]
        LOCAL["本地优先<br/>Microsandbox"]
        SELF["纯自托管<br/>OpenSandbox·AIO Sandbox"]
    end

    ZB --> EPHE
    E2B --> EPHE
    SP --> PERS
    DAY --> PERS
    MS --> PERS
    OS --> CONF

    E2B --> CLOUD
    SP --> CLOUD
    DAY --> HYBRID
    ZB --> HYBRID
    MS --> LOCAL
    OS --> SELF

flowchart TD
    START[Agent需要执行代码] --> Q1{需要跨会话<br/>保持状态？}

    Q1 -->|否| Q2{延迟要求？}
    Q1 -->|是| Q3{需要检查点<br/>回滚能力？}

    Q2 -->|亚毫秒级| ZB[Zeroboot<br/>0.79ms CoW派生]
    Q2 -->|<100ms| Q2A{合规要求<br/>独立内核？}
    Q2 -->|<200ms可接受| E2B[E2B<br/>Firecracker 150ms]

    Q2A -->|是| E2B
    Q2A -->|否| DAY_SPEED[Daytona<br/>Docker 27ms]

    Q3 -->|是| SPRITES[Sprites.dev<br/>300ms检查点/回滚]
    Q3 -->|否| Q4{需要Computer Use<br/>桌面控制？}

    Q4 -->|是| DAY_CU[Daytona<br/>Computer Use沙箱]
    Q4 -->|否| Q5{必须本地运行？}

    Q5 -->|是| MSB[Microsandbox<br/>本地microVM + 密钥安全]
    Q5 -->|否| Q6{已有K8s集群？}

    Q6 -->|是| OSBOX[OpenSandbox<br/>K8s原生 + 协议驱动]
    Q6 -->|否| SPRITES2[Sprites.dev<br/>托管持久化]

    style ZB fill:#ff6b6b,color:#fff
    style E2B fill:#4ecdc4,color:#fff
    style DAY_SPEED fill:#45b7d1,color:#fff
    style DAY_CU fill:#45b7d1,color:#fff
    style SPRITES fill:#96ceb4,color:#fff
    style MSB fill:#feca57,color:#333
    style OSBOX fill:#ff9ff3,color:#333

graph LR
    subgraph "临时派 Ephemeral"
        E2B_F["E2B<br/>Firecracker<br/>200M+沙箱"]
        ZB_F["Zeroboot<br/>CoW派生<br/>亚毫秒"]
    end

    subgraph "持久派 Persistent"
        SP_F["Sprites.dev<br/>检查点/回滚<br/>100GB ext4"]
        DAY_F["Daytona<br/>Computer Use<br/>虚拟桌面"]
    end

    subgraph "本地派 Local"
        MS_F["Microsandbox<br/>密钥安全<br/>libkrun"]
        AIO_F["AIO Sandbox<br/>全家桶<br/>Docker"]
    end

    subgraph "企业派 Enterprise"
        OS_F["OpenSandbox<br/>协议驱动<br/>K8s原生"]
    end

    E2B_F -.->|安全最大化| SEC["高安全场景"]
    ZB_F -.->|极速迭代| PERF["高频调用"]
    SP_F -.->|状态连续| DEV["编程Agent"]
    DAY_F -.->|桌面控制| UI["UI自动化"]
    MS_F -.->|数据不出域| ENT["企业合规"]
    OS_F -.->|标准化| STD["规模化部署"]