cloudflare-sandbox

Cloudflare Sandboxes provide isolated Linux containers for secure code execution at the edge. You create a sandbox session via the getSandbox API, execute code using sandbox.exec, and maintain state across commands within ephemeral Ubuntu containers running on Cloudflare Workers and Durable Objects.

Yes. Sandboxes execute Python, Node.js, shell commands, and Git operations inside isolated Ubuntu containers with full filesystem access under /workspace, /tmp, and /home directories, plus proper exit-code handling for error detection.

Sessions persist state between consecutive sandbox.exec calls within a single container instance. The 3-layer architecture—Worker, Durable Object, Container—handles session management, ensuring data and environment variables survive across command sequences until the session expires.

Use Sandboxes to run Git operations, build scripts, and CI/CD commands in ephemeral Ubuntu containers integrated with Cloudflare Workers. Each sandbox provides isolated execution with proper migrations and exit-code handling to track success and failures reliably.

Yes. Sandboxes support AI code interpreter scenarios where untrusted generated code must execute safely. The isolation prevents malicious or buggy code from affecting the host, making it ideal for dynamic execution alongside Workers and Durable Objects.

Sandboxes are ephemeral—containers terminate after use. Plan for session timeouts, manage large file operations within /workspace constraints, and account for container startup latency. Migrations and proper exit-code patterns prevent data loss and execution errors.