Skip to content

chore: bump execd to v1.0.20 #1144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Pangjiping merged 1 commit into from
Jun 29, 2026
Merged

chore: bump execd to v1.0.20 #1144

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/examples/agent-sandbox.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ opensandbox-server init-config ~/.sandbox.toml --example docker
```toml
[runtime]
type = "kubernetes"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[kubernetes]
namespace = "default"
Expand Down
2 changes: 1 addition & 1 deletion docs/examples/code-interpreter.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,7 @@ spec:
- name: opensandbox-bin
mountPath: /opt/opensandbox
- name: execd-installer
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20
command: [ "/bin/sh", "-c" ]
args:
- |
Expand Down
2 changes: 1 addition & 1 deletion examples/aks-kata/server-values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ configToml: |

[runtime]
type = "kubernetes"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20"

[storage]
allowed_host_paths = []
Expand Down
2 changes: 1 addition & 1 deletion examples/windows/pool-win-example.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,7 +58,7 @@ spec:
command:
- /bin/sh
- -c
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20
name: execd-installer
volumeMounts:
- mountPath: /opt/opensandbox
Expand Down
2 changes: 1 addition & 1 deletion kubernetes/charts/opensandbox-server/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -85,7 +85,7 @@ configToml: |

[runtime]
type = "kubernetes"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20"

[kubernetes]
kubeconfig_path = ""
Expand Down
2 changes: 1 addition & 1 deletion kubernetes/config/samples/sandbox_v1alpha1_pool.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ spec:
- name: opensandbox-bin
mountPath: /opt/opensandbox
- name: execd-installer
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20
command: [ "/bin/sh", "-c" ]
args:
- |
Expand Down
2 changes: 1 addition & 1 deletion kubernetes/config/samples/sandbox_v1alpha1_pool_restart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ spec:
command:
- /bin/sh
- -c
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19
image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20
name: execd-installer
volumeMounts:
- mountPath: /opt/opensandbox
Expand Down
6 changes: 3 additions & 3 deletions oseps/0004-secure-container-runtime.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -180,7 +180,7 @@ Extension to `~/.sandbox.toml`. A single `[secure_runtime]` section configures t
```toml
[runtime]
type = "docker" # or "kubernetes"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

# Secure container runtime configuration.
# When enabled, ALL sandboxes on this server use the specified runtime.
Expand Down Expand Up @@ -210,7 +210,7 @@ Example 1 — gVisor on Docker:
# ~/.sandbox.toml
[runtime]
type = "docker"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[secure_runtime]
type = "gvisor"
Expand All @@ -224,7 +224,7 @@ Example 2 — Kata Containers (QEMU) on Kubernetes:
# ~/.sandbox.toml
[runtime]
type = "kubernetes"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[secure_runtime]
type = "kata"
Expand Down
2 changes: 1 addition & 1 deletion oseps/0007-fast-sandbox-runtime-support.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -611,7 +611,7 @@ api_key = "your-secret-key"

[runtime]
type = "kubernetes"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[kubernetes]
namespace = "default"
Expand Down
2 changes: 1 addition & 1 deletion server/DEVELOPMENT.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ level = "DEBUG"

[runtime]
type = "docker"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[docker]
network_mode = "bridge"
Expand Down
4 changes: 2 additions & 2 deletions server/docker-compose.example.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@ configs:

[runtime]
type = "docker"
# execd_image = "opensandbox/execd:v1.0.19"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19"
# execd_image = "opensandbox/execd:v1.0.20"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20"

[egress]
image = "opensandbox/egress:v1.1.2"
Expand Down
2 changes: 1 addition & 1 deletion server/opensandbox_server/examples/example.config.k8s.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ level = "INFO"

[runtime]
type = "kubernetes"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[storage]
# Allowlist of host path prefixes permitted for bind mounts.
Expand Down
2 changes: 1 addition & 1 deletion server/opensandbox_server/examples/example.config.k8s.zh.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ level = "INFO"

[runtime]
type = "kubernetes"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20"

[storage]
# 允许进行 bind mount 的宿主机路径前缀白名单。
Expand Down
2 changes: 1 addition & 1 deletion server/opensandbox_server/examples/example.config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ level = "INFO"

[runtime]
type = "docker"
execd_image = "opensandbox/execd:v1.0.19"
execd_image = "opensandbox/execd:v1.0.20"

[storage]
# Allowlist of host path prefixes permitted for bind mounts.
Expand Down
2 changes: 1 addition & 1 deletion server/opensandbox_server/examples/example.config.zh.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ level = "INFO"

[runtime]
type = "docker"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.19"
execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.20"

[storage]
allowed_host_paths = []
Expand Down
10 changes: 5 additions & 5 deletions server/tests/test_docker_service.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1543,7 +1543,7 @@ async def test_create_sandbox_windows_profile_injects_runtime_defaults(mock_dock
mock_docker.from_env.return_value = mock_client

cfg = _app_config()
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.19"
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.20"
cfg.docker.network_mode = "bridge"
service = DockerSandboxService(config=cfg)
request = CreateSandboxRequest(
Expand Down Expand Up @@ -1626,7 +1626,7 @@ async def test_create_sandbox_windows_profile_rejects_missing_runtime_devices(mo
mock_docker.from_env.return_value = mock_client

cfg = _app_config()
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.19"
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.20"
cfg.docker.network_mode = "bridge"
service = DockerSandboxService(config=cfg)
request = CreateSandboxRequest(
Expand Down Expand Up @@ -1665,7 +1665,7 @@ async def test_create_sandbox_windows_profile_rejects_below_minimum_resource_lim
mock_docker.from_env.return_value = mock_client

cfg = _app_config()
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.19"
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.20"
cfg.docker.network_mode = "bridge"
service = DockerSandboxService(config=cfg)
request = CreateSandboxRequest(
Expand Down Expand Up @@ -1702,7 +1702,7 @@ async def test_create_sandbox_windows_profile_accepts_dockur_demo_like_request(m
mock_docker.from_env.return_value = mock_client

cfg = _app_config()
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.19"
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.20"
cfg.docker.network_mode = "bridge"
service = DockerSandboxService(config=cfg)
request = CreateSandboxRequest(
Expand Down Expand Up @@ -1756,7 +1756,7 @@ async def test_create_sandbox_windows_profile_with_network_policy_maps_windows_p
mock_docker.from_env.return_value = mock_client

cfg = _app_config()
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.19"
cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.20"
cfg.docker.network_mode = "bridge"
cfg.egress = EgressConfig(image="opensandbox/egress:latest")
service = DockerSandboxService(config=cfg)
Expand Down
Loading