v0.6.0

[fslongjin]

2026.07.24 Release v0.6.0

CubeSandbox 0.6.0 continues to strengthen core capabilities for production deployment and operations.
This release introduces 6 major features along with multiple enhancements and bug fixes. 92 commits from 31 contributors.

🎯 Major Features

Kubernetes Deployment: Deploy Cube Control Plane and Compute Nodes on K8s

Deploy CubeSandbox control-plane components and compute nodes directly onto Tencent Cloud TKE, standard Kubernetes, or k3s clusters via Helm Chart. Perform rolling upgrades, canary releases, and other operations using standard Kubernetes practices. For details, see the Kubernetes Deployment Guide.

::: warning Preview
Kubernetes deployment is currently in preview. Advanced capabilities such as seamless upgrades are still under active development. Feedback is welcome.
:::

E2B-Compatible Volume Framework

Introduces an E2B-compatible Volume framework that lets users plug in custom backend storage while remaining compatible with the E2B standard. Provides four hooks — Create / Destroy / Attach / Detach — and two plugin forms: Binary and RPC. This release includes Volume lifecycle management, sandbox–Volume binding APIs, and supporting SDK and cubemastercli capabilities. For details, see the Volume Plugin Guide.

Template Aliases

Support setting an alias when creating a template, and creating sandboxes by specifying that alias.

Note: Aliases can only be set at template creation time; existing templates cannot have aliases added or changed. Specifying an alias when creating a sandbox is currently supported only in the Python SDK; other SDKs will follow soon.

Configurable Host for Inbound Sandbox Requests

Allow configuring the Host header forwarded to the sandbox (instead of the default <port>-<sandboxId>.<domain>), improving compatibility with Host-based services inside the sandbox. The new network.maskRequestHost parameter can be set when creating a sandbox to specify the Host forwarded to in-sandbox services (for example localhost:${PORT}, which expands to localhost:3000 when accessing port 3000), so applications that rely on Host for routing, validation, or callbacks work correctly.

Compute Node Isolation

Support isolating a compute node at the scheduling layer so operators can log in for maintenance, upgrades, and troubleshooting. After isolation, no new sandboxes are scheduled to that node; existing sandboxes continue to run unaffected.

Isolate a node with cubemastercli node isolate <node-id>, and lift isolation with the unisolate subcommand. For details, see Node Isolation.

CubeOps Operations Service: Decouple Ops & Web Console Logic from CubeAPI

Web console capabilities are split out of the CubeAPI module into a standalone CubeOps service, making CubeAPI lighter and more extensible.

✨ Enhancements

SDK

• Go SDK PTY (feat(sdk): add PTY (interactive terminal) support to Go SDK #815): Improved interactive terminal capabilities.
• Python SDK X-API-Key coverage (fix(sdk/python): send X-API-Key on all control- and data-plane requests #995): Carry X-API-Key on all request paths.
• Go SDK Connect protocol frames and dataplane fixes (fix(sdk): Connect-envelope process.Process/Start and parse exit-0 end… #828, refactor(sdk/go): dedup encodeConnectEnvelope and fix data-plane bugs #941): process.Process/Start, exit-0 end event parsing, encode deduplication, and dataplane defect fixes.
• Short sandbox ID prefix resolution (cubemaster, cubelet: resolve short sandbox ID prefixes #697): CubeMaster / Cubelet support short ID prefix resolution for easier ops and troubleshooting.

Templates & Storage

• Templates can enable the ivshmem device (feat: add template-level ivshmem opt-in #858).
• cubemastercli UX improvements (cubemaster(cli): support positional template-id in tpl info/delete/redo #891): Better experience for tpl info / delete / redo.
• New cubemastercli volume-related subcommands (feat(volume): pass Create private_data through to Attach #1077).

Lifecycle & Control Plane

• CLM state sync (lifecycle: Sync pause/resume state from CubeMaster to CLM #956): Stronger sandbox lifecycle state consistency; control-plane pause/resume actions are synced to the dataplane.
• Async CubeProxy state push (feat(lifecycle): make proxy state push async with backoff retries #1044): Push with backoff retries to reduce sync-push jitter.
• Skip capacity checks for delete-triggered auto-resume (fix(cubelet): skip capacity admission for delete-triggered auto-resume #1015): Prevent resume on the delete path from being wrongly blocked by capacity checks.
• Schema migration toggle (feat(cubemaster): add CUBEMASTER_AUTO_MIGRATION switch to skip startup schema migration #1037, feat: rename CUBEMASTER_AUTO_MIGRATION to CUBE_AUTO_MIGRATION and app… #1076): New CUBE_AUTO_MIGRATION env var to skip automatic DB migration at startup for controlled upgrades.
• Support deleting sandboxes that are in the paused state.

Networking & Security Proxy

• CubeEgress MITM leaf certificate SAN (CubeEgress: Emit subjectAltName on MITM leaf certs #948): Write subjectAltName on leaf certificates for better TLS verification compatibility.
• Return 403 on traffic token validation failure (CubeProxy: Return 403 for traffic-token failures to preserve E2B comp… #1053): Align with E2B and avoid confusion with other error codes.
• CubeProxy Redis hostname resolver (fix(cubeproxy): configure resolver for Redis hostnames #714): Correctly resolve Redis hostnames.
• Disable gzip on Connect streams (fix(cube-proxy): disable gzip on Connect stream endpoints #1083): Prevent streaming RPCs from being broken by compression.

Deployment & Runtime

• PostgreSQL metadata backend (feat(cubemaster): add PostgreSQL support for dao layer #674, fix(cubemaster): make PostgreSQL runtime paths work after dao migration #1000): CubeMaster DAO layer supports PostgreSQL.
• Switch in-sandbox cgroup from v1 to v2 (feat(shim): add agent.unified_cgroup_hierarchy=true kernel cmdline #899).
• Cubelet state tmpfs supports dynamic expansion (feat(cubelet): refactor state tmpfs mount with safer resize logic #1008).

Web UI / CubeOps / Other

• Improved compute-node component version inventory reporting (feat(version): upgrade component version inventory with component-json source and incomplete-report handling #1020).
• CubeMaster HTTP APIs now handled with the gin framework (refactor(cubemaster): migrate HTTP API from gorilla/mux to gin-gonic/gin #922).

🐛 Bug Fixes

Lifecycle & Sandbox

• Nested host-mount mount order: apply configuration in user-specified order (fix(cubelet): make nested host mount order deterministic #946).
• Periodic compute-node health sync (fix(nodemeta): re-sync node health to localcache on periodic reload #730): Avoid inconsistency between health state and the scheduling view.
• WebUI: Converge to a 404 terminal state after sandbox timeout cleanup (fix(web):Handle sandbox detail 404 responses after timeout cleanup as a terminal state #1036); eliminate session invalidation risk (fix(web): session invalidation, template deletion UX #1048).

Security & Validation

• CVE-2026-24834 / CVE-2026-47243 fixes (Fix CVE-2026-24834 and CVE-2026-47243  #1066).
• Stronger image reference validation (fix(image): strengthen image reference validation and prevent argument injection #868): Prevent parameter injection.
• PVM kernel update (chore(pvm): bump PVM kernel tag to 6.6.69-1.2.cubesandbox #937): Address security vulnerabilities.

📚 Documentation

• Kubernetes deployment guide (feat: remove OpenKruise dependency and add K8s deployment docs #1067 and others): EN/ZH install / architecture / upgrade / FAQ.
• Node isolation guide (docs: add node isolation guide #1093).
• Volume plugin guide and COS examples (feat(volume): add Volume Plugin framework with COS examples #997, docs(volume): ship COS install-deps in plugin/ and note ARM limit #1089).
• Component troubleshooting guide (docs: add component log locations troubleshooting guide #968).

---

This discussion was created from the release v0.6.0.