Sandbox guide

CapabilitiesIsolation

Root access

You (and the agent) can act as the administrator: install anything, change system settings.

16 yes0 with a catch0 no0 not published

Who offers it

Part of Isolation: what kind of computer you get, which explains why it matters.

Fully: Agent 37, Blaxel, Boat, boxd, Cloudflare Sandbox, Daytona, E2B, InstaBox, Lizard, Modal, Morph, Runtime, Sandboxer, Sprites, Tensorlake and Vercel Sandbox.

  • Agent 37Yesroot on request

    Commands run as the image's normal user unless you ask for root.

    docs-confirmed “pass "root" to run as root, for example to install system packages with apt-get” Source

  • BlaxelYesroot by default

    docs-confirmed “By default, everything inside a sandbox runs as root.” Source

  • BoatYespasswordless sudo

    docs-confirmed “Passwordless sudo gives full root.” Source

  • boxdYespasswordless sudo

    docs-confirmed “You get a normal shell on the machine, as the boxd user with passwordless sudo.” Source

  • Cloudflare SandboxYesevery process is root

    There is no user separation inside one sandbox: every process has the same rights as root.

    docs-confirmed “every process has the same Linux capabilities as root” Source

  • DaytonaYesroot in the sandbox

    The default shell user is daytona, but code runs as root inside the container.

    docs-confirmed “Code runs as root inside the sandbox without affecting the runner.” Source

  • E2BYesroot via template

    Note: The default template runs as an ordinary user called user, not root; root has to be set in the template.

    docs-confirmed “The default user in the template is user with the /home/user (home directory) as the working directory.” Source

  • InstaBoxYespasswordless sudo

    docs-confirmed “passwordless sudo with apt for anything else” Source

  • LizardYesroot by default

    docs-confirmed “commands run as root unless you pass user” Source

  • MorphYesroot shell

    docs-confirmed “The examples assume a Debian-based instance such as morphvm-minimal and a root shell” Source

  • RuntimeYessudo, then root

    Commands start as the user runtime; sudo works without a password.

    docs-confirmed “sudo works without a password. You are root inside your own sandbox.” Source

  • SandboxerYessudo inside

    docs-confirmed “Inside it you are an ordinary Linux user with sudo.” Source

  • SpritesYessudo

    docs-confirmed “sudo apt install -y openssh-server” Source

  • TensorlakeYessudo or --user root

    Commands run as the non-root user tl-user, which has passwordless sudo.

    docs-confirmed “a non-root user with passwordless sudo” Source

  • Vercel SandboxYesfull root

    docs-confirmed “Provides full root access to install any package or binary” Source

Related

Other capabilities in this feature

Where it decides the choice

The feature

Words used here

  • IsolationHow firmly one machine is kept apart from others on the same hardware. A microVM is a small full computer and is the stronger wall; a container shares more with its neighbours.

Need several capabilities at once? Add more in the capability finder. Something wrong here? Use the report link at the bottom of the page.