Self-hosted VM sandboxes for untrusted and AI code: Kubernetes-orchestrated microVMs with a CLI, HTTP API, and Python SDK. Three backends: kfd (Firecracker + LVM), kql (QEMU + Longhorn), k7d (the k7d runtime — sub-second forks).
Highlights
- Multi-node HA install (Ansible), Longhorn topology, Cilium CNI + FQDN egress policies
- Pause / resume / fork across CLI, API, and SDK; named snapshots, restore, snapshot GC
- Docker-in-sandbox sidecar; Firecracker jailer; multi-backend per node or per sandbox
- Python SDK on PyPI:
pip install k7-sdk(from k7_sdk import Client) .debattached below for the CLI on Ubuntu 24.04 (amd64)
Breaking changes
- CLI talks to the HTTP API by default; use
--corefor the in-cluster path k7 start-api/k7 stop-api→k7 api enable|disable,k7 dev api rebuild- Pause:
--pvc/--snapshot-classflags removed;--snapshotbehavior fixed - Python package renamed:
katakate→k7-sdk(katakateimport warns for one release)
Install
See the README and docs. PPA (apt install k7) and a prebuilt GHCR API image are fast follow-ups.