hdspace-devbox

MicroVM agent sandbox for HDSPACE-DEV — lightweight isolated execution environments.

Overview

hdspace-devbox provides secure, lightweight sandbox environments using microVM technology. Each sandbox runs in an isolated VM with minimal overhead, suitable for running untrusted code or providing isolated development environments.

Inspired by Firecracker and Kata Containers.

Architecture

┌──────────┐     ┌─────────────┐     ┌──────────────┐
│ dashboard│────▶│ box-manager │────▶│  microVM     │
│ (Web UI) │     │ (control)   │     │  (Firecracker)│
└──────────┘     └─────────────┘     └──────────────┘
                       │                      │
                       ▼                      ▼
                 ┌────────────┐      ┌───────────────┐
                 │sandbox-agent│     │box-supervisor │
                 │(in-VM agent)│     │(PID 1 in VM)  │
                 └────────────┘      └───────────────┘

Components

Component	Role	Language	Binary	Description
box-manager	manager	Go	box-manager	Sandbox lifecycle management, VM scheduling
sandbox-agent	agent	Go	sandbox-agent	In-VM agent for command execution
box-supervisor	supervisor	Go	box-supervisor	PID 1 init process inside microVM
cli	—	Go	devbox-cli	Command-line client
dashboard	—	TypeScript	—	Web console

Quick Start

make build COMPONENT=box-manager
make test COMPONENT=box-manager

Project Structure

hdspace-devbox/
├── components/
│   ├── box-manager/       # Sandbox lifecycle management
│   ├── sandbox-agent/     # In-VM agent
│   ├── box-supervisor/    # microVM PID 1
│   ├── cli/               # CLI client
│   └── dashboard/         # Web console
├── install/               # Helm charts
├── docs/                  # Architecture + ADR
├── scripts/
├── .github/workflows/     # CI per component
├── Makefile               # Root orchestration
└── go.work                # Go workspace

License

MIT — see LICENSE.