Skip to content

feat(sandbox): support rootfs tar as --from source for VM driver#2863

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
feloy wants to merge 5 commits into
base:main
Choose a base branch
from
Open

feat(sandbox): support rootfs tar as --from source for VM driver #2863

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
0e7618b
feat(sandbox): support rootfs tar as --from source for VM driver
feloy Aug 21, 2026
75e1f2b
fix(sandbox): validate rootfs tar path at the VM driver boundary
feloy Aug 26, 2026
168b921
fix(sandbox): request-scoped staging, size pre-check, and cleanup for…
feloy Aug 26, 2026
8ec3e99
fix(vm): restore rootfs-tar sandboxes from persisted image identity
feloy Aug 26, 2026
c88045b
fix(cli): use random staging dirs and enforce byte limit during rootf…
feloy Aug 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions crates/openshell-cli/src/main.rs
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -1340,15 +1340,17 @@ enum SandboxCommands {
name: Option<String>,

/// Sandbox source: a community sandbox name (e.g., `ollama`), a path
/// to a Dockerfile or directory containing one, or a full container
/// image reference (e.g., `myregistry.com/img:tag`).
/// to a Dockerfile or directory containing one, a rootfs tar archive
/// (`.tar`, `.tar.gz`, or `.tgz`), or a full container image reference
/// (e.g., `myregistry.com/img:tag`).
///
/// Community names are resolved to
/// `ghcr.io/nvidia/openshell-community/sandboxes/<name>:latest`
/// (override the prefix with `OPENSHELL_COMMUNITY_REGISTRY`).
///
/// When given a Dockerfile or directory, the image is built into the
/// local Docker daemon before creating the sandbox.
/// local Docker daemon before creating the sandbox. When given a
/// rootfs tar, it is passed directly to the VM compute driver.
#[arg(long, value_hint = ValueHint::AnyPath)]
from: Option<String>,

Expand Down
Loading
Loading