# microsandbox > Easy, fast, local microVMs for untrusted workloads ## Docs - [Week of April 3, 2026](https://docs.microsandbox.dev/changelog/2026-04-03.md): The microsandbox rewrite around an embeddable SDK, smoltcp networking, and a composable filesystem. - [Week of April 10, 2026](https://docs.microsandbox.dev/changelog/2026-04-10.md): File-level volume mounts, TypeScript SDK streams, and `msb shell` removal. - [Week of April 17, 2026](https://docs.microsandbox.dev/changelog/2026-04-17.md): New Python SDK, Docker image publishing, and TLS proxy fixes. - [Week of April 24, 2026](https://docs.microsandbox.dev/changelog/2026-04-24.md): Block-backed OCI rootfs, guest rlimits, and TypeScript SDK improvements. - [Week of May 1, 2026](https://docs.microsandbox.dev/changelog/2026-05-01.md): TypeScript SDK redesign, network policy redesign, disk-image volumes, and more. - [Week of May 15, 2026](https://docs.microsandbox.dev/changelog/2026-05-15.md): Go SDK, file-first disk snapshots, guest init handoff, exec and boot logs, and DNS egress policy. - [Week of May 22, 2026](https://docs.microsandbox.dev/changelog/2026-05-22.md): Rotation-aware log streaming, raw agent client across SDKs, per-mount passthroughfs policies, network policy CLI cleanup, configurable port bind addresses, and ergonomic --script. - [Week of May 29, 2026](https://docs.microsandbox.dev/changelog/2026-05-29.md): Native SSH and SFTP, configurable OCI upper size, msb copy and rootfs patch flags, hardened mount options, env-backed secret shorthand, and a fix for multi-second published-port stalls. - [Week of June 5, 2026](https://docs.microsandbox.dev/changelog/2026-06-05.md): OTLP sandbox metrics, SSH TCP forwarding, image archive commands, pruning, Python image management, Homebrew install, and smoother host upgrades. - [Week of June 12, 2026](https://docs.microsandbox.dev/changelog/2026-06-12.md): Guest runtime metrics, idempotent named volumes, unified sandbox lifecycle APIs, explicit mount kind flags, cleaner installer, raw agent socket paths, and richer secret violation logs. - [Image commands](https://docs.microsandbox.dev/cli/image-commands.md): Pull and manage OCI images from the CLI - [CLI overview](https://docs.microsandbox.dev/cli/overview.md): Manage sandboxes from the terminal - [Sandbox commands](https://docs.microsandbox.dev/cli/sandbox-commands.md): Create, run, and interact with sandboxes from the CLI - [SSH commands](https://docs.microsandbox.dev/cli/ssh-commands.md): Connect to and serve sandboxes over SSH - [Volume commands](https://docs.microsandbox.dev/cli/volume-commands.md): Create and manage named volumes from the CLI - [config.json](https://docs.microsandbox.dev/configuration.md): Global config.json reference - [AI agents](https://docs.microsandbox.dev/getting-started/agents.md): Connect AI agents to isolated microsandbox machines - [Introduction](https://docs.microsandbox.dev/getting-started/introduction.md): Easy, fast, local microVMs for untrusted workloads - [Quickstart](https://docs.microsandbox.dev/getting-started/quickstart.md): Get a sandbox running in under 5 minutes - [Disk images](https://docs.microsandbox.dev/images/disk-images.md): Boot from QCOW2, Raw, or VMDK disk images - [OCI images](https://docs.microsandbox.dev/images/overview.md): Use standard container images from any registry - [DNS](https://docs.microsandbox.dev/networking/dns.md): How the sandbox resolves DNS queries - [Overview](https://docs.microsandbox.dev/networking/overview.md): Control network access and isolation - [Security model](https://docs.microsandbox.dev/networking/security-model.md): What the networking stack defends against - [TLS interception](https://docs.microsandbox.dev/networking/tls.md): HTTPS inspection with an auto-generated CA - [Deep dive](https://docs.microsandbox.dev/observability/deep-dive.md): Flags, emitted metrics, attributes, and operational notes for msb-metrics - [Metrics collector](https://docs.microsandbox.dev/observability/msb-metrics.md): msb-metrics, the sidecar binary that ships microsandbox metrics over OTLP - [Sandbox in Docker](https://docs.microsandbox.dev/recipes/docker/docker.md): Deploy microsandbox as a Docker container on Linux - [Docker in a sandbox](https://docs.microsandbox.dev/recipes/docker/docker-in-sandbox.md): Start dockerd inside a microsandbox VM and run containers from an interactive shell - [Using local Docker images](https://docs.microsandbox.dev/recipes/docker/local-images.md): Use locally built Docker images with microsandbox - [Booting under systemd](https://docs.microsandbox.dev/recipes/guest/systemd-services.md): Hand PID 1 to systemd inside the guest so services run under a real init - [Datadog](https://docs.microsandbox.dev/recipes/metrics-backends/datadog.md): Ship msb-metrics output to Datadog via the Datadog Agent's OTLP receiver - [Grafana Alloy](https://docs.microsandbox.dev/recipes/metrics-backends/grafana-alloy.md): Forward msb-metrics output to Grafana Cloud (or anywhere) via local Alloy - [Grafana Cloud](https://docs.microsandbox.dev/recipes/metrics-backends/grafana-cloud.md): Ship msb-metrics output to Grafana Cloud's OTLP gateway - [otel-collector](https://docs.microsandbox.dev/recipes/metrics-backends/otel-collector.md): Inspect msb-metrics output locally with the OpenTelemetry Collector - [Prometheus](https://docs.microsandbox.dev/recipes/metrics-backends/prometheus.md): Ship msb-metrics output directly to Prometheus's OTLP ingestion endpoint - [Commands](https://docs.microsandbox.dev/sandboxes/commands.md): Execute commands, stream output, and interact with sandboxes - [Customize](https://docs.microsandbox.dev/sandboxes/customize.md): Inject scripts, modify the rootfs, and choose your own init - [Filesystem](https://docs.microsandbox.dev/sandboxes/filesystem.md): Read and write files inside a running sandbox - [Lifecycle](https://docs.microsandbox.dev/sandboxes/lifecycle.md): Create, start, stop, and manage sandbox state - [Logs](https://docs.microsandbox.dev/sandboxes/logs.md): Capture, read, and diagnose sandbox output - [Metrics](https://docs.microsandbox.dev/sandboxes/metrics.md): Monitor sandbox resource usage - [Overview](https://docs.microsandbox.dev/sandboxes/overview.md): What sandboxes are and how to configure them - [Secrets](https://docs.microsandbox.dev/sandboxes/secrets.md): Secure credential injection for sandboxes - [Snapshots](https://docs.microsandbox.dev/sandboxes/snapshots.md): Capture a sandbox's writable layer as a portable artifact - [SSH](https://docs.microsandbox.dev/sandboxes/ssh.md): Connect to sandboxes through SSH protocol sessions - [Volumes](https://docs.microsandbox.dev/sandboxes/volumes.md): Persist and share data across sandboxes - [Error handling](https://docs.microsandbox.dev/sdk/errors.md): Typed errors and resource cleanup patterns - [Agent client](https://docs.microsandbox.dev/sdk/go/agent-client.md): Go SDK - Low-level agentd client reference - [Execution](https://docs.microsandbox.dev/sdk/go/execution.md): Go SDK - Command execution API reference - [Filesystem](https://docs.microsandbox.dev/sdk/go/filesystem.md): Go SDK - Filesystem API reference - [Images](https://docs.microsandbox.dev/sdk/go/images.md): Go SDK - Image cache API reference - [Networking](https://docs.microsandbox.dev/sdk/go/networking.md): Go SDK - Network API reference - [Sandbox](https://docs.microsandbox.dev/sdk/go/sandbox.md): Go SDK - Sandbox API reference - [Secrets](https://docs.microsandbox.dev/sdk/go/secrets.md): Go SDK - Secret injection API reference - [Snapshots](https://docs.microsandbox.dev/sdk/go/snapshots.md): Go SDK - Snapshot API reference - [SSH](https://docs.microsandbox.dev/sdk/go/ssh.md): Go SDK - SSH API reference - [Volumes](https://docs.microsandbox.dev/sdk/go/volumes.md): Go SDK - Volume API reference - [Overview](https://docs.microsandbox.dev/sdk/overview.md): Install the SDK and create your first sandbox - [Agent client](https://docs.microsandbox.dev/sdk/python/agent-client.md): Python SDK - Low-level agentd client reference - [Execution](https://docs.microsandbox.dev/sdk/python/execution.md): Python SDK - Command execution API reference - [Filesystem](https://docs.microsandbox.dev/sdk/python/filesystem.md): Python SDK - Filesystem API reference - [Images](https://docs.microsandbox.dev/sdk/python/images.md): Python SDK - Image cache API reference - [Networking](https://docs.microsandbox.dev/sdk/python/networking.md): Python SDK - Network API reference - [Sandbox](https://docs.microsandbox.dev/sdk/python/sandbox.md): Python SDK - Sandbox API reference - [Secrets](https://docs.microsandbox.dev/sdk/python/secrets.md): Python SDK - Secret injection API reference - [Snapshots](https://docs.microsandbox.dev/sdk/python/snapshots.md): Python SDK - Snapshot API reference - [SSH](https://docs.microsandbox.dev/sdk/python/ssh.md): Python SDK - SSH API reference - [Volumes](https://docs.microsandbox.dev/sdk/python/volumes.md): Python SDK - Volume API reference - [Agent client](https://docs.microsandbox.dev/sdk/rust/agent-client.md): Rust SDK - Low-level agentd client reference - [Execution](https://docs.microsandbox.dev/sdk/rust/execution.md): Rust SDK - Command execution API reference - [Filesystem](https://docs.microsandbox.dev/sdk/rust/filesystem.md): Rust SDK - Filesystem API reference - [Networking](https://docs.microsandbox.dev/sdk/rust/networking.md): Rust SDK - Network API reference - [Sandbox](https://docs.microsandbox.dev/sdk/rust/sandbox.md): Rust SDK - Sandbox API reference - [Secrets](https://docs.microsandbox.dev/sdk/rust/secrets.md): Rust SDK - Secret injection API reference - [Snapshots](https://docs.microsandbox.dev/sdk/rust/snapshots.md): Rust SDK - Snapshot API reference - [SSH](https://docs.microsandbox.dev/sdk/rust/ssh.md): Rust SDK - SSH API reference - [Volumes](https://docs.microsandbox.dev/sdk/rust/volumes.md): Rust SDK - Volume API reference - [Agent client](https://docs.microsandbox.dev/sdk/typescript/agent-client.md): TypeScript SDK - Low-level agentd client reference - [Execution](https://docs.microsandbox.dev/sdk/typescript/execution.md): TypeScript SDK - Command execution API reference - [Filesystem](https://docs.microsandbox.dev/sdk/typescript/filesystem.md): TypeScript SDK - Filesystem API reference - [Networking](https://docs.microsandbox.dev/sdk/typescript/networking.md): TypeScript SDK - Network API reference - [Sandbox](https://docs.microsandbox.dev/sdk/typescript/sandbox.md): TypeScript SDK - Sandbox API reference - [Secrets](https://docs.microsandbox.dev/sdk/typescript/secrets.md): TypeScript SDK - Secret injection API reference - [Snapshots](https://docs.microsandbox.dev/sdk/typescript/snapshots.md): TypeScript SDK - Snapshot API reference - [SSH](https://docs.microsandbox.dev/sdk/typescript/ssh.md): TypeScript SDK - SSH API reference - [Volumes](https://docs.microsandbox.dev/sdk/typescript/volumes.md): TypeScript SDK - Volume API reference ## OpenAPI Specs - [openapi](https://docs.microsandbox.dev/api-reference/openapi.json)