[core][sandbox] Support multi-uid user namespaces for network="public" sandboxes - #65823

Open

xyuzh wants to merge 17 commits into

ray-project:masterfrom

xyuzh:sandbox-multi-uid

Commits on Sep 1, 2026

[core][sandbox] Add an experimental HTTP API service for Ray Sandbox
xyuzh
committed
9d0577c
[core][sandbox] Never block sandbox creation on actor scheduling
xyuzh
committed
484498c
[core][sandbox] Keep the HTTP API responsive while the cluster scales up
xyuzh
committed
2062adb
[core][sandbox] Map unschedulable sandboxes to a clean API error
xyuzh
committed
6e71b3e
[core][sandbox] Support appending writes for chunked file uploads
xyuzh
committed
7f25905
[docs] Style pass on the HTTP API service section
xyuzh
committed
028e3cd
[core][sandbox] Address review: idempotent create across dead actors, shared runsc cache, concurrent listing
xyuzh
committed
a6cfd5b
[core][sandbox] Support per-exec user (uid, uid:gid, or image user name)
xyuzh
committed
2f4511f
[core][sandbox] Isolate network=public sandboxes in per-sandbox netns via pasta
xyuzh
committed
8e23dad
[core][sandbox] Isolate network="public" sandboxes in per-sandbox netns via pasta
xyuzh
committed
a23716c
[core][sandbox] Support multi-uid user namespaces for network="public" sandboxes
xyuzh
committed
f2f0c1b
[core][sandbox] Skip network="public" tests where the host cannot boot the sandbox
xyuzh
committed
d74d0a1
[core][sandbox] Make serve_lib visible to sandbox http package
xyuzh
committed
e8e9143
[core][sandbox] Sort idmap import in the gVisor backend (ruff isort)
xyuzh
committed
813a761
fix(sandbox/http) Decouple the HTTP package from serve for core CI
xyuzh
committed
775d3cb

Commits on Sep 2, 2026