Base image
Works locallyWorks in the local build today.
Every sandbox starts from one image: Ubuntu 24.04 LTS, on HareBox's own Linux 6.18 LTS kernel. It has real systemd, a user account with passwordless sudo, Docker with BuildKit and Compose, and nested /dev/kvm. Ubuntu 26.04 LTS is planned; the API accepts only ubuntu-24.04 until its image exists.
Status: the image is built and checked on real VMs on the development machine (tests/spikes/run.py). No rented server has run it yet.
Every version is pinned, and every download is checked against its SHA-256 before it goes into the image. This table is generated from the image recipe in host/ch/image/.
| Tool | Version |
|---|---|
node |
24.22.2 |
go |
1.27.3 |
rust |
1.99.1 |
bun |
1.4.4 |
uv |
0.13.7 |
gh |
2.103.3 |
code-server |
4.145.2 |
chrome |
157.0.8103.38 |
firecracker |
1.17.0 |
android-cmdline-tools |
9862592 |
@anthropic-ai/claude-code (npm) |
2.1.319 |
@openai/codex (npm) |
0.167.0 |
opencode-ai (npm) |
1.19.5 |
@mariozechner/pi-coding-agent (npm) |
0.73.1 |
openclaw (npm) |
2026.11.1 |
Ubuntu packages, from a dated archive snapshot: build-essential, pkg-config, git, git-lfs, curl, wget, ca-certificates, jq, ripgrep, fd-find, tmux, unzip, zip, xz-utils, rsync, less, vim-tiny, htop, sqlite3, openssh-server, python3-venv, python3-pip, python3-dev, pipx, openjdk-21-jdk-headless, qemu-system-x86, qemu-utils, xvfb, xfce4-session, xfwm4, xfce4-panel, xfdesktop4, xfce4-terminal, xfce4-settings, dbus-x11, x11-xserver-utils, x11vnc, novnc, python3-websockify, xdotool, xclip, ffmpeg, at-spi2-core, python3-pyatspi, fonts-dejavu-core, fonts-liberation, fonts-noto-color-emoji, wine, wine64.
Also in the image:
corepackshims forpnpmandyarn, which fetch on first use.- The Android SDK command-line tools in
/opt/android-sdk. harebox-harness,harebox-android-setupandharebox-computer(the desktop and its MCP server) in/usr/local/bin.- A desktop (Xvfb, Xfce, x11vnc and noVNC) that starts on first use. See Desktop.
- 64-bit Wine. 32-bit Windows programs need Wine's 32-bit libraries, which aren't included.
These have no artifact that can be pinned for offline install, so they install from their publisher when you first ask. That needs the sandbox's network.
harebox-harness list
harebox-harness install kimi # also: vibe, hermes, prime, cursor
harebox-android-setup 35 # emulator, platform tools and an API 35 system image
A stop saves the whole disk, so ~/.cache, /tmp and Docker's build cache come back on resume, so a resumed sandbox picks up warm caches instead of rebuilding them. Sleep keeps memory and running programs as well.