zeroboot-vm-sandbox by aradotso/trending-skills
npx skills add https://github.com/aradotso/trending-skills --skill zeroboot-vm-sandbox技能来自 ara.so — Daily 2026 技能集合。
Zeroboot 为 AI 智能体提供亚毫秒级的 KVM 虚拟机沙盒,使用写时复制(CoW)分叉技术。每个沙盒都是一个真正的硬件隔离的虚拟机(通过 Firecracker + KVM),而非容器。模板虚拟机被快照一次,然后每次执行时使用 mmap(MAP_PRIVATE) 的 CoW 语义进行分叉,耗时约 0.8 毫秒。
Firecracker 快照 ──► mmap(MAP_PRIVATE) ──► KVM 虚拟机 + 恢复的 CPU 状态
(写时复制) (~0.8ms)
pip install zeroboot
npm install @zeroboot/sdk
# 或
pnpm add @zeroboot/sdk
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者,精准高效
将您的 API 密钥设置为环境变量:
export ZEROBOOT_API_KEY="zb_live_your_key_here"
切勿在源代码文件中硬编码密钥。
curl -X POST https://api.zeroboot.dev/v1/exec \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $ZEROBOOT_API_KEY" \
-d '{"code":"import numpy as np; print(np.random.rand(3))"}'
import os
from zeroboot import Sandbox
# 使用环境变量中的 API 密钥初始化
sb = Sandbox(os.environ["ZEROBOOT_API_KEY"])
# 运行 Python 代码
result = sb.run("print(1 + 1)")
print(result) # "2"
# 运行多行代码
result = sb.run("""
import numpy as np
arr = np.arange(10)
print(arr.mean())
""")
print(result)
import { Sandbox } from "@zeroboot/sdk";
const apiKey = process.env.ZEROBOOT_API_KEY!;
const sb = new Sandbox(apiKey);
// 运行 JavaScript/Node 代码
const result = await sb.run("console.log(1 + 1)");
console.log(result); // "2"
// 运行异步代码
const output = await sb.run(`
const data = [1, 2, 3, 4, 5];
const sum = data.reduce((a, b) => a + b, 0);
console.log(sum / data.length);
`);
console.log(output);
import os
from zeroboot import Sandbox
def execute_agent_code(code: str) -> dict:
"""在隔离的 VM 沙盒中执行 LLM 生成的代码。"""
sb = Sandbox(os.environ["ZEROBOOT_API_KEY"])
try:
result = sb.run(code)
return {"success": True, "output": result}
except Exception as e:
return {"success": False, "error": str(e)}
# 示例:安全运行智能体生成的代码
agent_code = """
import json
data = {"agent": "result", "value": 42}
print(json.dumps(data))
"""
response = execute_agent_code(agent_code)
print(response)
import os
import asyncio
from zeroboot import Sandbox
async def run_sandbox(code: str, index: int) -> str:
sb = Sandbox(os.environ["ZEROBOOT_API_KEY"])
result = await asyncio.to_thread(sb.run, code)
return f"[{index}] {result}"
async def run_concurrent(snippets: list[str]):
tasks = [run_sandbox(code, i) for i, code in enumerate(snippets)]
results = await asyncio.gather(*tasks)
return results
# 并发运行 10 个沙盒
codes = [f"print({i} ** 2)" for i in range(10)]
outputs = asyncio.run(run_concurrent(codes))
for out in outputs:
print(out)
import { Sandbox } from "@zeroboot/sdk";
interface ExecutionResult {
success: boolean;
output?: string;
error?: string;
}
async function runInSandbox(code: string): Promise<ExecutionResult> {
const sb = new Sandbox(process.env.ZEROBOOT_API_KEY!);
try {
const output = await sb.run(code);
return { success: true, output };
} catch (err) {
return { success: false, error: String(err) };
}
}
// 作为工具集成到 LLM 智能体中
const tool = {
name: "execute_code",
description: "在隔离的 VM 沙盒中运行代码",
execute: async ({ code }: { code: string }) => runInSandbox(code),
};
const API_BASE = "https://api.zeroboot.dev/v1";
async function execCode(code: string): Promise<string> {
const res = await fetch(`${API_BASE}/exec`, {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Bearer ${process.env.ZEROBOOT_API_KEY}`,
},
body: JSON.stringify({ code }),
});
if (!res.ok) {
const err = await res.text();
throw new Error(`Zeroboot 错误 ${res.status}: ${err}`);
}
const data = await res.json();
return data.output;
}
curl https://api.zeroboot.dev/v1/health
POST /v1/exec在新的沙盒分叉中执行代码。
请求:
{
"code": "print('hello')"
}
请求头:
Authorization: Bearer <ZEROBOOT_API_KEY>
Content-Type: application/json
响应:
{
"output": "hello\n",
"duration_ms": 0.79
}
| 指标 | 数值 |
|---|---|
| 生成延迟 p50 | ~0.79ms |
| 生成延迟 p99 | ~1.74ms |
| 每个沙盒内存占用 | ~265KB |
| 分叉 + 执行 Python | ~8ms |
| 1000 个并发分叉 | ~815ms |
请参阅仓库中的 docs/DEPLOYMENT.md。要求:
支持 KVM 的 Linux 主机(可访问 /dev/kvm)
Firecracker 二进制文件
Rust 2021 版本工具链
ls /dev/kvm
git clone https://github.com/adammiribyan/zeroboot cd zeroboot cargo build --release
mmap(MAP_PRIVATE) → 内核为每个虚拟机处理 CoW 缺页异常/dev/kvm not found(自托管)
# 启用 KVM 内核模块
sudo modprobe kvm
sudo modprobe kvm_intel # 或 kvm_amd
API 返回 401 Unauthorized
ZEROBOOT_API_KEY 已设置且以 zb_live_ 开头执行超时
内存使用率高(自托管)
每周安装量
241
仓库
GitHub 星标数
10
首次出现
6 天前
安全审计
安装于
github-copilot240
codex240
amp240
cline240
kimi-cli240
gemini-cli240
Skill by ara.so — Daily 2026 Skills collection.
Zeroboot provides sub-millisecond KVM virtual machine sandboxes for AI agents using copy-on-write forking. Each sandbox is a real hardware-isolated VM (via Firecracker + KVM), not a container. A template VM is snapshotted once, then forked in ~0.8ms per execution using mmap(MAP_PRIVATE) CoW semantics.
Firecracker snapshot ──► mmap(MAP_PRIVATE) ──► KVM VM + restored CPU state
(copy-on-write) (~0.8ms)
pip install zeroboot
npm install @zeroboot/sdk
# or
pnpm add @zeroboot/sdk
Set your API key as an environment variable:
export ZEROBOOT_API_KEY="zb_live_your_key_here"
Never hardcode keys in source files.
curl -X POST https://api.zeroboot.dev/v1/exec \
-H 'Content-Type: application/json' \
-H "Authorization: Bearer $ZEROBOOT_API_KEY" \
-d '{"code":"import numpy as np; print(np.random.rand(3))"}'
import os
from zeroboot import Sandbox
# Initialize with API key from environment
sb = Sandbox(os.environ["ZEROBOOT_API_KEY"])
# Run Python code
result = sb.run("print(1 + 1)")
print(result) # "2"
# Run multi-line code
result = sb.run("""
import numpy as np
arr = np.arange(10)
print(arr.mean())
""")
print(result)
import { Sandbox } from "@zeroboot/sdk";
const apiKey = process.env.ZEROBOOT_API_KEY!;
const sb = new Sandbox(apiKey);
// Run JavaScript/Node code
const result = await sb.run("console.log(1 + 1)");
console.log(result); // "2"
// Run async code
const output = await sb.run(`
const data = [1, 2, 3, 4, 5];
const sum = data.reduce((a, b) => a + b, 0);
console.log(sum / data.length);
`);
console.log(output);
import os
from zeroboot import Sandbox
def execute_agent_code(code: str) -> dict:
"""Execute LLM-generated code in an isolated VM sandbox."""
sb = Sandbox(os.environ["ZEROBOOT_API_KEY"])
try:
result = sb.run(code)
return {"success": True, "output": result}
except Exception as e:
return {"success": False, "error": str(e)}
# Example: running agent-generated code safely
agent_code = """
import json
data = {"agent": "result", "value": 42}
print(json.dumps(data))
"""
response = execute_agent_code(agent_code)
print(response)
import os
import asyncio
from zeroboot import Sandbox
async def run_sandbox(code: str, index: int) -> str:
sb = Sandbox(os.environ["ZEROBOOT_API_KEY"])
result = await asyncio.to_thread(sb.run, code)
return f"[{index}] {result}"
async def run_concurrent(snippets: list[str]):
tasks = [run_sandbox(code, i) for i, code in enumerate(snippets)]
results = await asyncio.gather(*tasks)
return results
# Run 10 sandboxes concurrently
codes = [f"print({i} ** 2)" for i in range(10)]
outputs = asyncio.run(run_concurrent(codes))
for out in outputs:
print(out)
import { Sandbox } from "@zeroboot/sdk";
interface ExecutionResult {
success: boolean;
output?: string;
error?: string;
}
async function runInSandbox(code: string): Promise<ExecutionResult> {
const sb = new Sandbox(process.env.ZEROBOOT_API_KEY!);
try {
const output = await sb.run(code);
return { success: true, output };
} catch (err) {
return { success: false, error: String(err) };
}
}
// Integrate as a tool for an LLM agent
const tool = {
name: "execute_code",
description: "Run code in an isolated VM sandbox",
execute: async ({ code }: { code: string }) => runInSandbox(code),
};
const API_BASE = "https://api.zeroboot.dev/v1";
async function execCode(code: string): Promise<string> {
const res = await fetch(`${API_BASE}/exec`, {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: `Bearer ${process.env.ZEROBOOT_API_KEY}`,
},
body: JSON.stringify({ code }),
});
if (!res.ok) {
const err = await res.text();
throw new Error(`Zeroboot error ${res.status}: ${err}`);
}
const data = await res.json();
return data.output;
}
curl https://api.zeroboot.dev/v1/health
POST /v1/execExecute code in a fresh sandbox fork.
Request:
{
"code": "print('hello')"
}
Headers:
Authorization: Bearer <ZEROBOOT_API_KEY>
Content-Type: application/json
Response:
{
"output": "hello\n",
"duration_ms": 0.79
}
| Metric | Value |
|---|---|
| Spawn latency p50 | ~0.79ms |
| Spawn latency p99 | ~1.74ms |
| Memory per sandbox | ~265KB |
| Fork + exec Python | ~8ms |
| 1000 concurrent forks | ~815ms |
See docs/DEPLOYMENT.md in the repo. Requirements:
Linux host with KVM support (/dev/kvm accessible)
Firecracker binary
Rust 2021 edition toolchain
ls /dev/kvm
git clone https://github.com/adammiribyan/zeroboot cd zeroboot cargo build --release
mmap(MAP_PRIVATE) on snapshot file → kernel handles CoW page faults per VM/dev/kvm not found (self-hosted)
# Enable KVM kernel module
sudo modprobe kvm
sudo modprobe kvm_intel # or kvm_amd
API returns 401 Unauthorized
ZEROBOOT_API_KEY is set and starts with zb_live_Timeout on execution
High memory usage (self-hosted)
Weekly Installs
241
Repository
GitHub Stars
10
First Seen
6 days ago
Security Audits
Gen Agent Trust HubPassSocketPassSnykWarn
Installed on
github-copilot240
codex240
amp240
cline240
kimi-cli240
gemini-cli240
Azure 配额管理指南:服务限制、容量验证与配额增加方法
79,700 周安装
推荐与联盟计划设计优化指南:病毒式增长、客户获取成本降低策略
236 周安装
使用 shadcn/ui 和 Radix Primitives 构建无障碍 UI 组件库 - CVA 变体与 OKLCH 主题指南
236 周安装
use-agently CLI:去中心化AI智能体市场命令行工具,支持A2A/MCP协议与链上支付
237 周安装
Docker容器化最佳实践指南:生产就绪容器构建、安全优化与CI/CD部署
237 周安装
Excel/XLSX文件编程操作指南:Python openpyxl/pandas与JavaScript xlsx库教程
237 周安装
DaleStudy技能创建指南:skill-creator使用教程与SEO优化
237 周安装