OpenSandbox

vdocker/egress/v1.1.1 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Updates 📝 Documentation, 🐛 Bug Fixes, and ✨ Features across a mixed release.

Full changelog

Credential vault TLS transport check configurable — new OPENSANDBOX_EGRESS_CREDENTIAL_VAULT_REQUIRE_TLS env var controls whether vault writes require TLS/loopback. When enabled, also trusts X-Forwarded-Proto: https for TLS-terminating proxies. Default off. (#1063)

DNS race on crash restart eliminated — pre-start hook now cleans up stale iptables rules that survived crashes. Replaced 200ms blind wait with NotifyStartedFunc to confirm socket bind before installing redirects. (#1061)
Credential vault works with defaultAction: allow — vault bindings no longer require explicit egress allow rules when default policy is allow. Explicit deny rules still enforced. (#1066)

README synced with current code — added credential vault docs, missing env vars, IP/CIDR support, and corrected "Graceful Degradation" → "Fail-Closed Enforcement". (#1080)

Thanks to these contributors ❤️

Docker Hub: opensandbox/egress:v1.1.1
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.1.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.