Sandbox quickstart

A secure, pluggable code execution backend designed for RAGFlow and other applications requiring isolated code execution environments.

Features:

Seamless RAGFlow Integration — Works out-of-the-box with the code component of RAGFlow.
High Security — Uses gVisor for syscall-level sandboxing to isolate execution.
Customisable Sandboxing — Modify seccomp profiles easily to tailor syscall restrictions.
Pluggable Runtime Support — Extendable to support any programming language runtime.
Developer Friendly — Quick setup with a convenient Makefile.

Architecture

The architecture consists of isolated Docker base images for each supported language runtime, managed by the executor manager service. The executor manager orchestrates sandboxed code execution using gVisor for syscall interception and optional seccomp profiles for enhanced syscall filtering.

Prerequisites

Linux distribution compatible with gVisor.
gVisor installed and configured.
Docker version 25.0 or higher (API 1.44+). Ensure your executor manager image ships with Docker CLI 29.1.0 or higher to stay compatible with the latest Docker daemons.
Docker Compose version 2.26.1 or higher (similar to RAGFlow requirements).
uv package and project manager installed.
(Optional) GNU Make for simplified command-line management.

:::tip NOTE The error message client version 1.43 is too old. Minimum supported API version is 1.44 indicates that your executor manager image's built-in Docker CLI version is lower than 29.1.0 required by the Docker daemon in use. To solve this issue, pull the latest infiniflow/sandbox-executor-manager:latest from Docker Hub or rebuild it in ./sandbox/executor_manager. :::

Build Docker base images

The sandbox uses isolated base images for secure containerised execution environments.

Build the base images manually:

bash

docker build -t sandbox-base-python:latest ./sandbox_base_image/python
docker build -t sandbox-base-nodejs:latest ./sandbox_base_image/nodejs

Alternatively, build all base images at once using the Makefile:

bash

make build

Next, build the executor manager image:

bash

docker build -t sandbox-executor-manager:latest ./executor_manager

Running with RAGFlow

Verify that gVisor is properly installed and operational.
Configure the .env file located at docker/.env:

Uncomment sandbox-related environment variables.
Enable the sandbox profile at the bottom of the file.

Add the following entry to your /etc/hosts file to resolve the executor manager service:
bash
```
127.0.0.1 es01 infinity mysql minio redis sandbox-executor-manager
```
Start the RAGFlow service as usual.

Running standalone

Manual setup

Initialize the environment variables:
bash
```
cp .env.example .env
```
Launch the sandbox services with Docker Compose:
bash
```
docker compose -f docker-compose.yml up
```

Test the sandbox setup:

bash

source .venv/bin/activate
export PYTHONPATH=$(pwd)
uv pip install -r executor_manager/requirements.txt
uv run tests/sandbox_security_tests_full.py

Using Makefile

Run all setup, build, launch, and tests with a single command:

bash

make

Monitoring

To follow logs of the executor manager container:

bash

docker logs -f sandbox-executor-manager

Or use the Makefile shortcut:

bash

make logs