SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Sandbox Open-Source Projects
-
Well, FireCracker has a jailer process: https://github.com/firecracker-microvm/firecracker/blob/main...
-
CodeRabbit
CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
-
Project mention: Reverse Engineering OpenAI Code Execution to make it run C and JavaScript | news.ycombinator.com | 2025-03-12
> why would they be running such an old Linux?
They didn't.
OP misunderstood what gVisor is, and thought gVisor's uname() return [1] was from the actual kernel. It's not. That's the whole point of gVisor. You don't get to talk to the real kernel.
[1] https://github.com/google/gvisor/blob/c68fb3199281d6f8fe02c7...
-
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh rustup target install wasm32-wasip1 cargo install --locked --version 1.227.1 wasm-tools cargo install --locked --git https://github.com/dicej/spin --branch wasi-http-p3-demo spin-cli git clone https://github.com/WebAssembly/wasi-http -n && (cd wasi-http && git checkout 505ebdb9) curl -OL https://github.com/bytecodealliance/wasmtime/releases/download/v30.0.2/wasi_snapshot_preview1.reactor.wasm
-
-
Ultimately, the combination of C and Wasm3 worked successfully.
-
Not it is the free software or open source version of this game, but OpenLoco https://openloco.io/ is great, and I hope that this game in near future will have a free assets like as OpenTTD https://www.openttd.org/ .
-
Project mention: How to run GUI applications directly in containers | news.ycombinator.com | 2025-02-27
Curious that there's no comparison to https://github.com/mviereck/x11docker , which I would describe as the incumbent in this space.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
sandpack
A component toolkit for creating live-running code editing experiences, using the power of CodeSandbox.
Sandpack static file support 🖼️ — You can now serve static files inside a Sandpack instance! This beta feature allows serving SVGs, fonts, images, and much more, which helps take isolated, interactive code examples to a new level!
-
The-Powder-Toy
Written in C++ and using SDL, The Powder Toy is a desktop version of the classic 'falling sand' physics sandbox, it simulates air pressure and velocity as well as heat.
Project mention: Defibrillation devices save lives using 1k times less electricity | news.ycombinator.com | 2024-11-07 -
4. fragments
-
Terasology - Minecraft-inspired voxel game. Java
-
pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
-
Project mention: Thrive is a free, open-source game about the evolution of life | news.ycombinator.com | 2025-03-17
-
Going to toot my own horn here but if you're looking for something like a container with a security focus that is precisely what https://nanos.org was built for. No users, no login/ssh, no ability to run other programs other than the one that is already running. It kills off entire CWE's such as CWE-77/CWE-78 and neutralizes a large amount of nasty payloads forcing attackers to put in the work. It has all the same security features you'll find in linux (aslr, stack exec off, rodata no exec, etc.) but more.
A go unikernel deployed in this manner might have 5 files on the fs so you don't have a half-dozen interpreters or live off the land binary type stuff. Beware though that not all unikernels are built the same way and don't share the same security profiles as nanos.
At the end of the day though if security is a driving force containers are simply not built for that. Just the other day CVE-2024-45310 landed and a few weeks ago we had CVE-2024-42472 in flakpak (a continuation of the bubblewrap stuff).
People are probably going to jump in here and mention gvisor and firecracker. Note that firecracker is really a machine monitor replacement and most payloads are still running a linux guest (although nanos can work here). Gvisor does deal with the security issue well enough but at the cost of performance if you don't have access to hw virtualization.
-
-
junest
The lightweight Arch Linux based distro that runs, without root privileges, on top of any other Linux distro.
-
-
Project mention: Codapi – Interactive code examples for documentation, education and fun | news.ycombinator.com | 2024-04-29
-
KubeArmor
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).
-
-
Nanos is the actual kernel while ops (https://ops.city) is the build/deploy tool. I presume you're asking if this is doing "orchestration" - that is more of a container term. These get deployed as actual vms so all the orchestration stuff is performed by the cloud.
-
kuasar
A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.
Project mention: My VM is lighter (and safer) than your container | news.ycombinator.com | 2024-05-14 -
hvpp
hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Sandbox discussion
Sandbox related posts
-
Reverse Engineering OpenAI Code Execution to make it run C and JavaScript
-
This Week in Docker: AI, AI, AI!
-
Show HN: Ephemeral VMs in 1 Microsecond
-
MoonBit compiler is available on GitHub
-
Building And Running WASM Apps
-
Query Your Python Lists
-
Spin 3.0 – open-source tooling for building and running WASM apps
-
A note from our sponsor - SaaSHub
www.saashub.com | 25 Mar 2025
Index
What are some of the best open-source Sandbox projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | firecracker | 27,327 |
| 2 | gvisor | 16,258 |
| 3 | wasmtime | 16,007 |
| 4 | cosmos-js | 8,440 |
| 5 | wasm3 | 7,496 |
| 6 | OpenTTD | 6,759 |
| 7 | x11docker | 5,809 |
| 8 | sandpack | 5,316 |
| 9 | The-Powder-Toy | 4,743 |
| 10 | fragments | 4,729 |
| 11 | Terasology | 3,713 |
| 12 | pafish | 3,589 |
| 13 | Thrive | 3,071 |
| 14 | nanos | 2,736 |
| 15 | CAPEv2 | 2,265 |
| 16 | junest | 2,139 |
| 17 | JS-Interpreter | 2,058 |
| 18 | codapi | 1,721 |
| 19 | KubeArmor | 1,693 |
| 20 | sandboxed-api | 1,685 |
| 21 | OPS | 1,337 |
| 22 | kuasar | 1,304 |
| 23 | hvpp | 1,162 |
Sponsored
CodeRabbit: AI Code Reviews for Developers
Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
coderabbit.ai