cubemastercli
CLI for managing CubeSandbox templates and sandboxes
TLDR
SYNOPSIS
cubemastercli subcommand action [options]
DESCRIPTION
cubemastercli is the command-line interface for CubeSandbox, a high-performance, secure sandbox service built on RustVMM and KVM. It is used by operators to create, build, and monitor sandbox templates that back isolated execution environments for AI agents.Templates are produced from OCI container images and encapsulate everything needed to spin up a microVM-based sandbox, including the root filesystem, writable layer, exposed ports, and a readiness probe. Once a template is built, CubeSandbox can launch sandboxes from it in under 60 ms with hardware-level isolation.The tool is typically run against a CubeMaster control plane that orchestrates the underlying microVMs on RustVMM/KVM hosts.
PARAMETERS
tpl create-from-image
Build a new sandbox template from a container image. Submits a build job to CubeMaster.tpl watch
Follow the progress of a running template build job.--image registry/image:tag
Container image used as the base of the template.--writable-layer-size size
Size of the writable overlay layer (e.g. 1G). Sandboxes launched from the template get a fresh writable layer of this size.--expose-port port
Expose a TCP port from the sandbox. May be specified multiple times.--probe port
Port used for the readiness probe; the template is considered ready once this port accepts connections.--job-id id
Identifier of a build job to watch, as returned by tpl create-from-image.--help
Show help for the command or subcommand.
EXAMPLES
Build a code-interpreter template from a Tencent Cloud image and watch the resulting job:
--image ccr.ccs.tencentyun.com/ags-image/sandbox-code:latest \
--writable-layer-size 1G \
--expose-port 49999 \
--expose-port 49983 \
--probe 49999
cubemastercli tpl watch --job-id <job_id>
CAVEATS
cubemastercli requires a reachable CubeMaster control plane and a host with KVM enabled. It is part of the CubeSandbox project and is not shipped by Linux distributions; flags and subcommands may change between releases.
HISTORY
CubeSandbox was open-sourced by Tencent Cloud as an instant, concurrent, secure and lightweight sandbox for AI agents, built on RustVMM and KVM. cubemastercli ships as the administrative client for its CubeMaster control plane.
SEE ALSO
docker(1), firecracker(1), kvm(4), qemu(1)
