Containarium v0.107.0

What changed

Added

• alertable signal when the backup-health read fails (#2305) (#2606)

Fixed

• run clamd as root so scans can read root-only files (#2631) (#2632)
• startup base-script reconcile skips core containers and the index update (#2617) (#2622)
• posture markers do not make an instance managed; name why entries are unresolved (#2619) (#2621)
• deny-burst counts enforced drops only by default (#2612) (#2614)
• resolve managed TERMINATE_USER_SESSIONS user ids to local logins (#2602) (#2611)

Documentation

• document that replies to inbound connections are judged as new flows (#2618) (#2623)
• address review on #2609 — PR ref, portable date, remaining gce_instance comments (#2610)
• name the series the OTLP exporter actually writes (prometheus namespace, prometheus_target) (#2609)

Internal

• release v0.107.0 (#2640)
• remove unused pkg/core/coresys (hardcoded default DB password) (#2624) (#2625)
• ScanContainer-level test for failed scans (#2589) (#2616)
• opt the observation-only lane into counting log_only denies (#2612) (#2620)
• cover the credential-free git fetch; document the private-repo limit (#2053) (#2615)
• publish the mid-wait sidecar atomically; diagnosable failure (#2600) (#2603)

Full diff: v0.106.0...v0.107.0

---

Containarium v0.107.0

The open-source, self-hostable, agent-native sandbox.

Binaries

Four binaries ship in this release:

Binary	Where it runs	What it does
containariumd	The host	The platform daemon plus host-side admin commands.
containarium	Your laptop / CI (linux, macOS, windows)	The client CLI: create, list, expose-port, ssh-config, etc. against a server (--server).
mcp-server	Your laptop	The platform MCP — outside-the-box admin (create_container, list_containers, expose_port, list_backends). Wire it into Claude Code / Cursor.
agent-box	Inside each Containarium container	The in-the-box MCP — shell_exec, read_file, write_file, etc. Reached over stdio, typically via SSH.

Quick install (Linux host)

curl -fsSL https://raw.githubusercontent.com/footprintai/containarium/main/hacks/install.sh | sudo bash

Manual install (any binary, any platform)

# containariumd daemon (Linux x86_64 host)
curl -L -o /usr/local/bin/containariumd \
  https://github.com/footprintai/containarium/releases/download/v0.107.0/containariumd-linux-amd64
chmod +x /usr/local/bin/containariumd
ln -sf /usr/local/bin/containariumd /usr/local/bin/containarium

# containarium client CLI (your laptop, e.g. macOS arm64)
curl -L -o /usr/local/bin/containarium \
  https://github.com/footprintai/containarium/releases/download/v0.107.0/containarium-darwin-arm64
chmod +x /usr/local/bin/containarium

# Windows: the same client CLI (create/list/ssh/… against a remote server)
# PowerShell:
#   curl.exe -L -o containarium.exe `
#     https://github.com/footprintai/containarium/releases/download/v0.107.0/containarium-windows-amd64.exe

# platform MCP (your laptop, e.g. macOS arm64)
curl -L -o /usr/local/bin/mcp-server \
  https://github.com/footprintai/containarium/releases/download/v0.107.0/mcp-server-darwin-arm64
chmod +x /usr/local/bin/mcp-server

# agent-box (drop into your container image, Linux x86_64)
curl -L -o /usr/local/bin/agent-box \
  https://github.com/footprintai/containarium/releases/download/v0.107.0/agent-box-linux-amd64
chmod +x /usr/local/bin/agent-box

Verify checksums via SHA256SUMS.txt.

MCP client setup

Wire the platform MCP into Claude Code (~/.claude.json):

{
  "mcpServers": {
    "containarium": {
      "command": "/usr/local/bin/mcp-server",
      "env": {
        "CONTAINARIUM_SERVER_URL": "http://your-host:8080",
        "CONTAINARIUM_JWT_TOKEN": "<your-token>"
      }
    }
  }
}

Wire agent-box for in-the-box file/shell ops:

{
  "mcpServers": {
    "containarium-box": {
      "command": "ssh",
      "args": ["user@your-box", "agent-box"]
    }
  }
}

See README.md for the full agent-native walkthrough.