Containarium

v0.18.1 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 8d Virtualization

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-native agentic-ai cloud-cost-efficiency dev-environment lxc lxc-container

+2 more

multi-tenant ssh

Summary

AI summary

Introduces three binaries: containarium, mcp-server, and agent-box.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds `mcp-server` binary for platform MCP on user laptop. Adds `mcp-server` binary for platform MCP on user laptop. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Adds `agent-box` binary for in‑the‑box file and shell operations. Adds `agent-box` binary for in‑the‑box file and shell operations. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Adds `containarium` daemon/CLI binary for platform management commands. Adds `containarium` daemon/CLI binary for platform management commands. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Provides quick install script via curl for Linux hosts. Provides quick install script via curl for Linux hosts. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Documents manual installation steps for all binaries on any platform. Documents manual installation steps for all binaries on any platform. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Provides example configuration snippets to wire `mcp-server` into Claude Code. Provides example configuration snippets to wire `mcp-server` into Claude Code. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	References README.md quick‑start walkthrough for full agent‑native usage. References README.md quick‑start walkthrough for full agent‑native usage. Source: llm_adapter@2026-05-27 Confidence: high	—
Feature	Low	Provides example configuration snippets to wire `agent-box` via SSH for in‑the‑box ops. Provides example configuration snippets to wire `agent-box` via SSH for in‑the‑box ops. Source: llm_adapter@2026-05-27 Confidence: low	—
Feature	Low	Includes SHA256SUMS.txt for binary checksum verification. Includes SHA256SUMS.txt for binary checksum verification. Source: llm_adapter@2026-05-27 Confidence: low	—
Feature	Low	Provides example configuration to use `agent-box` over SSH for in‑the‑box operations. Provides example configuration to use `agent-box` over SSH for in‑the‑box operations. Source: granite4.1:30b@2026-05-27-audit Confidence: low	—

Full changelog

Containarium v0.18.1

The open-source, self-hostable, agent-native sandbox.

Binaries

Three binaries ship in this release:

| Binary | Where it runs | What it does |
|---|---|---|
| containarium | The host (and your laptop, for the CLI) | The platform daemon + CLI. create, list, expose-port, ssh-config, etc. |
| mcp-server | Your laptop | The platform MCP — outside-the-box admin (create_container, list_containers, expose_port, list_backends). Wire it into Claude Code / Cursor. |
| agent-box | Inside each Containarium container | The in-the-box MCP — shell_exec, read_file, write_file, etc. Reached over stdio, typically via SSH. |

Quick install (Linux host)

curl -fsSL https://raw.githubusercontent.com/footprintai/containarium/main/hacks/install.sh | sudo bash

Manual install (any binary, any platform)

# containarium CLI / daemon (Linux x86_64 example)
curl -L -o /usr/local/bin/containarium \
  https://github.com/footprintai/containarium/releases/download/v0.18.1/containarium-linux-amd64
chmod +x /usr/local/bin/containarium

# platform MCP (your laptop, e.g. macOS arm64)
curl -L -o /usr/local/bin/mcp-server \
  https://github.com/footprintai/containarium/releases/download/v0.18.1/mcp-server-darwin-arm64
chmod +x /usr/local/bin/mcp-server

# agent-box (drop into your container image, Linux x86_64)
curl -L -o /usr/local/bin/agent-box \
  https://github.com/footprintai/containarium/releases/download/v0.18.1/agent-box-linux-amd64
chmod +x /usr/local/bin/agent-box

Verify checksums via SHA256SUMS.txt.

MCP client setup

Wire the platform MCP into Claude Code (~/.claude.json):

{
  "mcpServers": {
    "containarium": {
      "command": "/usr/local/bin/mcp-server",
      "env": {
        "CONTAINARIUM_SERVER_URL": "http://your-host:8080",
        "CONTAINARIUM_JWT_TOKEN": "<your-token>"
      }
    }
  }
}

Wire agent-box for in-the-box file/shell ops:

{
  "mcpServers": {
    "containarium-box": {
      "command": "ssh",
      "args": ["user@your-box", "agent-box"]
    }
  }
}

See README.md for the full agent-native walkthrough.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Containarium

Get notified when new releases ship.

About Containarium

All releases →