[core][sandbox] Isolate network="public" sandboxes in per-sandbox netns via pasta - #65820

Open

xyuzh wants to merge 15 commits into

ray-project:masterfrom

xyuzh:sandbox-public-netns

Commits on Sep 1, 2026

[core][sandbox] Add an experimental HTTP API service for Ray Sandbox
xyuzh
committed
8ada8d8
[core][sandbox] Never block sandbox creation on actor scheduling
xyuzh
committed
ecbcbc3
[core][sandbox] Keep the HTTP API responsive while the cluster scales up
xyuzh
committed
a40a8eb
[core][sandbox] Map unschedulable sandboxes to a clean API error
xyuzh
committed
4ff725b
[core][sandbox] Support appending writes for chunked file uploads
xyuzh
committed
61fc7c1
[docs] Style pass on the HTTP API service section
xyuzh
committed
fcf54a0
[core][sandbox] Address review: idempotent create across dead actors, shared runsc cache, concurrent listing
xyuzh
committed
c3aa0d7
[core][sandbox] Support per-exec user (uid, uid:gid, or image user name)
xyuzh
committed
b132706
[core][sandbox] Isolate network=public sandboxes in per-sandbox netns via pasta
xyuzh
committed
4b0ccaf
[core][sandbox] Isolate network="public" sandboxes in per-sandbox netns via pasta
xyuzh
committed
3d33e51
[core][sandbox] Tighten the netns test suite
xyuzh
committed
6b419af
[core][sandbox] Skip network="public" tests where the host cannot boot the sandbox
xyuzh
committed
04e7ef8
[core][sandbox] Make serve_lib visible to sandbox http package
xyuzh
committed
bc813a5
fix(sandbox/http) Decouple the HTTP package from serve for core CI
xyuzh
committed
3a3cc1c

Commits on Sep 2, 2026

fix(sandbox/http) Stabilize the sandbox-http tests under core CI
xyuzh
committed
a83cd46