opensandbox-group/OpenSandbox docker/code-interpreter/v1.1.0 on GitHub

What's New

Migrate code-interpreter paths from /opt/opensandbox to /opt/code-interpreter — all code-interpreter entrypoint, env script, and log paths have moved from /opt/opensandbox/ to /opt/code-interpreter/. Consumers who hardcode the entrypoint /opt/opensandbox/code-interpreter.sh must update to /opt/code-interpreter/code-interpreter.sh. Users who pin a specific tag (e.g., v1.0.2) are unaffected — existing tagged images remain immutable. See the full migration guide in (#1012)

Sign and attest release artifacts — code-interpreter Docker images are now signed with Sigstore/cosign keyless signing and published with GitHub attestations. Supports verification of image authenticity and integrity. (#827)
Add seccomp-based clone3 fallback in execd — inside the sandbox, execd now falls back from clone3 to clone when the seccomp profile blocks clone3, improving compatibility with older kernels and restrictive seccomp policies. (#518)

Skip repeated tslab install on startup — the code-interpreter startup script now checks whether tslab and its Jupyter kernelspecs are already installed before re-running npm install -g tslab and tslab install, reducing cold-start time for pre-built images. (#960)

Add Dockerfile.dockerignore to reduce build context — shrinks the Docker build context sent to the builder, speeding up image builds. (#718)

Thanks to these contributors ❤️

Docker Hub: opensandbox/code-interpreter:v1.1.0
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/code-interpreter:v1.1.0