Skip to content

Sandboxes

View as Markdown

Daytona provides full composable computerssandboxes — for AI agents.

Sandboxes are isolated runtime environments you can manage programmatically to run code. Each sandbox runs in isolation, giving it a dedicated kernel, filesystem, network stack, and allocated vCPU, RAM, and disk. Agents and developers get access to a full composable computer where they can install packages, run servers, compile code, and manage processes.

Sandboxes have 1 vCPU, 1GB RAM, and 3GiB disk by default. Organizations get a maximum sandbox resource limit of 4 vCPUs, 8GB RAM, and 10GB disk.

Sandboxes can use snapshots to capture a fully configured environment (base operating system, installed packages, dependencies and configuration) to create new sandboxes.

Daytona provides methods to create sandboxes.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Click Create
from daytona import Daytona
daytona = Daytona()
sandbox = daytona.create()

Daytona provides pre-built snapshots for creating sandboxes.

  1. Navigate to Daytona Sandboxes ↗

  2. Click Create Sandbox

  3. Select a snapshot

    • daytona-small
    • daytona-medium
    • daytona-large
  4. Click Create

from daytona import Daytona, CreateSandboxFromSnapshotParams
daytona = Daytona()
sandbox = daytona.create(
CreateSandboxFromSnapshotParams(
snapshot="daytona-medium",
)
)

Daytona provides methods to create sandboxes with custom resources.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Enter a base image
  4. Set Resources (cpu, memory, disk) to the values within your organization’s limits
  5. Click Create
from daytona import Daytona, CreateSandboxFromImageParams, Image, Resources
daytona = Daytona()
sandbox = daytona.create(
CreateSandboxFromImageParams(
image=Image.debian_slim("3.12"),
resources=Resources(cpu=2, memory=4, disk=8),
)
)

Daytona provides methods to create ephemeral sandboxes.

Ephemeral sandboxes are automatically deleted once they are stopped.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Set Ephemeral to True or set the auto-delete interval to 0
  4. Click Create
from daytona import Daytona, CreateSandboxFromSnapshotParams
daytona = Daytona()
params = CreateSandboxFromSnapshotParams(
ephemeral=True,
auto_stop_interval=5,
)
sandbox = daytona.create(params)

Daytona provides methods to create linked sandboxes.

Linked sandboxes are attached to an existing parent sandbox at creation time.

  • Lifecycle

    Linked sandboxes are always ephemeral and cannot be persisted or resumed after stop. The auto-delete interval must be exactly 0 on create; this is enforced, not a default. The auto-stop interval sets the idle period in minutes after which the child sandbox stops. Once stopped, linked children are auto-deleted. Deleting the parent deletes all of its linked children (cascade). One parent may have many linked children (1:N).

  • Networking

    Linked sandboxes share an internal link network. Connections work in both directions: the parent can reach each child and each child can reach the parent. Every sandbox on the link network is registered under its sandbox name and ID as DNS aliases, so either works as the host. For example: telnet LINKED_SANDBOX_ID 5555 from the parent reaches port 5555 on the linked child sandbox.

  1. Create a parent sandbox
  2. Create one or more child sandboxes that reference the parent’s sandbox ID. This records the relationship on the child sandbox as the linked sandbox ID. Omitting the linked sandbox parameter yields an unlinked sandbox.
from daytona import CreateSandboxFromSnapshotParams, Daytona
daytona = Daytona()
parent = daytona.create()
child = daytona.create(
CreateSandboxFromSnapshotParams(
linked_sandbox=parent.id,
ephemeral=True,
)
)
# The link network registers each sandbox under its name as a DNS alias
response = child.process.exec(f"curl http://{parent.name}:3000/")

Sandboxes have 1 vCPU, 1GB RAM, and 3GiB disk by default. Organizations get a maximum sandbox resource limit of 4 vCPUs, 8GB RAM, and 10GB disk.

ResourceUnitDefaultMinimumMaximum
CPUvCPU114
MemoryGiB118
DiskGiB3110

Daytona provides methods to start sandboxes.

  1. Navigate to Daytona Sandboxes ↗
  2. Click the start icon () next to the sandbox you want to start
sandbox.start()

Daytona provides methods to get a sandbox by ID or name.

sandbox = daytona.get("my-sandbox-id-or-name")

Daytona provides methods to list sandboxes.

for sandbox in daytona.list():
print(sandbox.id)

Daytona provides methods to stop sandboxes.

Stopped sandboxes maintain filesystem persistence while their memory state is cleared. They incur only disk usage costs and can be started again when needed.

The stopped state should be used when a sandbox is expected to be started again. Otherwise, it is recommended to stop and then archive the sandbox to eliminate disk usage costs.

  1. Navigate to Daytona Sandboxes ↗
  2. Click the stop icon () next to the sandbox you want to stop
sandbox.stop()

If you need a faster shutdown, use force stop (force=true / --force) to terminate the sandbox immediately. Force stop is ungraceful and should be used when quick termination is more important than process cleanup. Avoid force stop for normal shutdowns where the process should flush buffers, write final state, or run cleanup hooks.

Common use cases for force stop include:

  • you need to reduce stop time and can accept immediate termination
  • the entrypoint ignores termination signals or hangs during shutdown

Daytona provides methods to archive sandboxes.

  1. Ensure the sandbox is stopped
  2. Archive the sandbox
  3. Wait for the sandbox to reach the archived state to move filesystem state to object storage
  4. Start the sandbox again when you need to use it
sandbox.archive()

Daytona provides methods to recover sandboxes.

  1. Ensure the sandbox is in error state
  2. Check that the sandbox is recoverable
  3. Resolve any underlying issue that requires user intervention
  4. Recover the sandbox and wait for it to be ready
# Check if the sandbox is recoverable
if sandbox.recoverable:
sandbox.recover()
sandbox.recover()

Daytona provides methods to resize sandbox resources after creation.

On a running sandbox, you can increase CPU and memory without interruption. To decrease CPU or memory, or to increase disk capacity, stop the sandbox first. Disk size can only be increased and cannot be decreased.

Resizing updates the sandbox resource allocation (cpu, memory, and disk) for that sandbox only. CPU and memory control compute capacity for running workloads, while disk controls persistent filesystem capacity. Values must be integers and stay within your organization’s per-sandbox resource limits.

  1. Choose the new CPU, memory, and disk values within your organization’s limits
  2. Ensure the sandbox is stopped if you need to decrease CPU or memory, or increase disk
  3. Resize the sandbox with the new resource values
  4. Start the sandbox
# Resize a started sandbox (CPU and memory can be increased)
sandbox.resize(Resources(cpu=2, memory=4))
# Resize a stopped sandbox (CPU and memory can change, disk can only increase)
sandbox.stop()
sandbox.resize(Resources(cpu=4, memory=8, disk=20))
sandbox.start()

To verify CPU and memory limits inside the sandbox after resizing, read cgroup values directly. Tools such as nproc, free, top, htop, /proc/cpuinfo, and /proc/meminfo read host-level values and do not reflect sandbox resource limits.

Terminal window
cat /sys/fs/cgroup/cpu.max # "<quota> <period>" (cores = quota / period)
cat /sys/fs/cgroup/memory.max # bytes
df -h / # disk

Daytona provides methods to fork sandboxes.

Forking creates a duplicate of your sandbox’s filesystem and memory, and copies it into a new sandbox. The new sandbox is fully independent: it can be started, stopped, and deleted without affecting the original. The sandbox must be in started state before forking.

Daytona tracks the parent-child relationship in a fork tree, so you can always trace a fork’s lineage back to the sandbox it was created from. You can fork a fork, building out branches as needed. The parent sandbox cannot be deleted while it has active fork children.

  1. Navigate to Daytona Sandboxes ↗
  2. Click the three-dot menu () next to the sandbox you want to fork
  3. Select Fork
# Fork sandbox through the Sandbox instance
forked = sandbox._experimental_fork(name="my-forked-sandbox")

Daytona provides methods to set sandbox labels.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Click Add Labels
  4. Enter the labels in key-value pairs
sandbox.set_labels({
"team": "platform",
"env": "staging",
})

Daytona provides methods to create a snapshot from an existing sandbox.

A snapshot captures a point-in-time copy of a sandbox that you can use as a base to create new sandboxes, templating a known-good environment for reuse.

Container sandboxes capture filesystem state only. For hot and cold snapshots on VM sandboxes (Linux and Windows), see VM sandboxes.

sandbox._experimental_create_snapshot("my-sandbox-snapshot")

Daytona provides methods to delete sandboxes.

  1. Navigate to Daytona Sandboxes ↗
  2. Click the Delete button next to the sandbox you want to delete.
sandbox.delete()

A sandbox can have several different states. Each state reflects the status of your sandbox.

Sandbox states
StateDescription
CreatingThe sandbox is provisioning and will be ready to use.
Pulling SnapshotThe sandbox is pulling a snapshot to provide a base environment.
Building SnapshotThe sandbox is building a snapshot to provide a base environment.
Pending BuildThe sandbox build is pending and will start shortly.
Build FailedThe sandbox build failed and needs to be retried.
StartingThe sandbox is starting and will be ready to use.
StartedThe sandbox has started and is ready to use.
StoppingThe sandbox is stopping and will no longer accept requests.
StoppedThe sandbox has stopped and is no longer running.
PausingThe sandbox is pausing while its filesystem and memory state are preserved.
PausedThe sandbox is paused with its filesystem and memory state preserved.
ResumingThe sandbox is resuming from a paused state and will be ready to use.
ArchivingThe sandbox is archiving and its state will be preserved.
ArchivedThe sandbox has been archived and its state is preserved.
RestoringThe sandbox is being restored from archive and will be ready to use shortly.
ResizingThe sandbox is being resized to a new set of resources.
SnapshottingThe sandbox is creating a snapshot of its filesystem and memory.
ForkingThe sandbox is being forked into a new independent sandbox.
DeletingThe sandbox is deleting and will be removed.
DeletedThe sandbox has been deleted and no longer exists.
ErrorThe sandbox is in an error state and needs to be recovered.
UnknownThe default sandbox state before it is created.

The diagram demonstrates the states and possible transitions between them.

Sandbox lifecycle diagram

A sandbox can transition between states in response to various actions. The following table lists the initial state, target state, and trigger for the transition.

State transitions
Initial stateTarget stateTrigger
UnknownPulling SnapshotThe base snapshot is being pulled to provide the sandbox environment.
UnknownBuilding SnapshotThe sandbox uses a declarative image build, which begins building.
Pending BuildBuilding SnapshotThe queued image build starts.
Building SnapshotBuild FailedThe image build fails or times out.
Pulling SnapshotCreatingThe snapshot is available and the sandbox container is created.
Building SnapshotCreatingThe snapshot finishes building and the sandbox container is created.
CreatingStartedThe sandbox container finishes initializing and is running.
StoppedStartingA start is requested and the sandbox boots.
StoppedRestoringA start is requested and the sandbox is restored from a backup.
ArchivedRestoringA start is requested and the archived filesystem is restored from object storage.
RestoringStartedThe restore completes and the sandbox is running.
StartingStartedThe sandbox is running and ready to accept requests.
StartedStoppingA stop is requested, or the auto-stop interval is exceeded.
StoppingStoppedThe sandbox process exits and its memory state is cleared.
StartedPausingA pause is requested.
PausingPausedThe filesystem and memory state are preserved.
PausedResumingA start is requested on a paused sandbox.
PausedStoppingA stop is requested on a paused sandbox.
ResumingStartedThe sandbox resumes from memory and is running.
StoppedArchivingAn archive is requested, or the auto-archive interval is exceeded.
ArchivingArchivedThe backup completes and the filesystem is moved to object storage.
StartedResizingCPU or memory is increased on a running sandbox.
StoppedResizingResources are changed on a stopped sandbox.
ResizingStartedThe running sandbox returns to service after resizing.
ResizingStoppedThe stopped sandbox completes resizing.
StartedSnapshottingA snapshot of the filesystem and memory is created.
StoppedSnapshottingA snapshot of the filesystem is created.
SnapshottingStartedThe snapshot completes and the sandbox returns to service.
SnapshottingStoppedThe snapshot completes and the sandbox remains stopped.
StartedForkingThe sandbox is forked into a new independent sandbox.
ForkingStartedThe fork completes and the sandbox returns to service.
StartedDeletingA delete is requested, or the auto-delete interval is exceeded.
StoppedDeletingA delete is requested.
ArchivedDeletedAn archived sandbox is deleted directly without being restored.
DeletingDeletedThe sandbox is removed and its resources are released.
StartedErrorAn operation fails or times out.
ErrorRestoringA recover is requested for a recoverable error and the sandbox is restored.
ErrorArchivingAn errored sandbox with a completed backup is archived to preserve its state.

Daytona sandboxes support Python, TypeScript, and JavaScript programming language runtimes for direct code execution inside the sandbox. The language parameter controls which programming language runtime is used for the sandbox:

  • python
  • typescript
  • javascript

If omitted, the Daytona SDK will default to python. To override this, explicitly set the language value when creating the sandbox.

Sandboxes can be automatically stopped, archived, and deleted based on user-defined intervals. The intervals act as a TTL (time-to-live) mechanism for the sandbox. You can also refresh the last activity timestamp to explicitly signal activity when lifecycle behavior depends on inactivity intervals.

Daytona provides methods to update a sandbox’s last activity timestamp.

This updates the sandbox’s recorded activity time without changing its runtime state. It is useful when your workflow is driven by external systems or background orchestration that may not reset inactivity tracking.

sandbox.refresh_activity()

The auto-stop interval sets the amount of time after which a running sandbox is automatically stopped. The auto-stop triggers even if there are internal processes running in the sandbox.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Set auto-stop interval to the desired value in minutes
    • 0: disables the auto-stop functionality, allowing the sandbox to run indefinitely
    • if not set, the default interval of 15 minutes is used
  4. Click Create
sandbox = daytona.create(CreateSandboxFromSnapshotParams(
snapshot="my-snapshot-name",
# Disables the auto-stop feature - default is 15 minutes
auto_stop_interval=0,
))

The system differentiates between “internal processes” and “active user interaction”. Merely having a script or background task running is not sufficient to keep the sandbox alive.

The inactivity timer resets only for specific external interactions:

The following do not reset the timer:

  • SDK requests that are not toolbox actions
  • Background scripts (e.g., npm run dev run as a fire-and-forget command)
  • Long-running tasks without external interaction
  • Processes that don’t involve active monitoring

If you run a long-running task like LLM inference that takes more than 15 minutes to complete without any external interaction, the sandbox may auto-stop mid-process because the process itself doesn’t count as “activity”, therefore the timer is not reset.

Daytona provides methods to set the auto-archive interval.

The auto-archive interval sets the amount of time after which a continuously stopped sandbox is automatically archived.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Set auto-archive interval to the desired value in minutes
    • 0: the maximum interval of 30 days is used
    • if not set, the default interval of 7 days is used
  4. Click Create
sandbox = daytona.create(CreateSandboxFromSnapshotParams(
snapshot="my-snapshot-name",
# Auto-archive after a sandbox has been stopped for 1 hour
auto_archive_interval=60,
))

Daytona provides methods to set the auto-delete interval.

The auto-delete interval sets the amount of time after which a continuously stopped sandbox is automatically deleted.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Set auto-delete to the desired value in minutes
    • -1: disables the auto-delete functionality
    • 0: the sandbox is deleted immediately after it is stopped
    • if not set, the sandbox is not deleted automatically
  4. Click Create
sandbox = daytona.create(CreateSandboxFromSnapshotParams(
snapshot="my-snapshot-name",
# Auto-delete after a sandbox has been stopped for 1 hour
auto_delete_interval=60,
))
# Delete the sandbox immediately after it has been stopped
sandbox.set_auto_delete_interval(0)
# Disable auto-deletion
sandbox.set_auto_delete_interval(-1)

Daytona provides methods to run sandboxes indefinitely.

By default, Daytona sandboxes auto-stop after 15 minutes of inactivity. To keep a sandbox running without interruption, set the auto-stop interval to 0 when creating a new sandbox.

  1. Navigate to Daytona Sandboxes ↗
  2. Click Create Sandbox
  3. Set auto-stop to 0
  4. Click Create
sandbox = daytona.create(CreateSandboxFromSnapshotParams(
snapshot="my_awesome_snapshot",
# Disables the auto-stop feature - default is 15 minutes
auto_stop_interval=0,
))