Sandlock 0.8.9: Rust process sandbox without root
Sandlock 0.8.9 strengthens filesystem confinement, adds a sandbox-specific network view and more expressive allow/deny network policies, and improves process cleanup for untrusted workloads like agent tools.
Announcing Sandlock 0.8.9 Sandlock is an open-source process sandbox built with Rust, Landlock, and seccomp. It runs without root privileges, cgroups, or namespaces, with APIs for Rust, Python, and Go. This release focuses on the details that matter when running agent tools, build jobs, and other untrusted workloads: • Stronger filesystem confinement. Copy-on-write file opens inside a chroot now stay anchored to their layer roots, fixing a path where absolute symlinks could reach host files. • A sandbox-specific network view. Virtualized /proc network tables expose sockets owned by sandbox processes, using socket cookies to identify ownership. Unsupported network entries are rejected. • More complete process cleanup. Shutdown and kill operations reach tracked process groups, including descendants that create new sessions or process groups. • More expressive network policies. Combine allow and deny rules to express policies such as “allow this range except that subnet.” Deny rules take precedence. • Better process-limit accounting. Process slots are released on exit, and process limits are now opt-in. Set an explicit limit when you need to bound process creation. Upgrade note: this release also changes the checkpoint image format; version 2 checkpoint images are no longer accepted. If you're building systems that execute untrusted code, try Sandlock and share the workloads you'd like us to test. Code and documentation: https://github.com/multikernel/sandlock Full changelog: https://github.com/multikernel/sandlock/releases/tag/v0.8.9 #OpenSource #Linux #Sandboxing #AIInfrastructure