# nativesandbox

> Run untrusted code in isolated sandboxes on any Linux host. No KVM, no nested virtualisation.

- [Sandboxes on any Linux host](https://nativesandbox.dev/index.md): Run untrusted code in isolated sandboxes without a hypervisor. Containers through Podman or Docker — no KVM, no nested virtualisation, no daemon of its own.
- [Quickstart](https://nativesandbox.dev/getting-started/quickstart.md): From nothing to a running sandbox in one command, then the same thing from code.
- [Requirements](https://nativesandbox.dev/getting-started/requirements.md): What a host needs to run sandboxes, how to install it, and how to prove it works rather than assume it.
- [doctor and setup](https://nativesandbox.dev/cli/doctor.md): Find out whether a host can run sandboxes, and fix what it cannot — one command at a time, shown before it runs.
- [Sandbox commands](https://nativesandbox.dev/cli/commands.md): run, exec, ls, rm and sweep — the fleet from a terminal.
- [Sandboxes](https://nativesandbox.dev/guides/sandboxes.md): Creating a sandbox, the reuse rule that keeps caches warm, forcing a fresh one, and removal.
- [Running commands](https://nativesandbox.dev/guides/commands.md): exec, live output, timeouts, cancellation, and why a failing command is a result rather than an exception.
- [The workspace](https://nativesandbox.dev/guides/workspace.md): A bind-mounted directory rather than a channel to a guest — what that buys, and how paths are kept inside it.
- [Resource limits](https://nativesandbox.dev/guides/limits.md): Memory, CPU, processes and network per sandbox — and the branded units that stop a limit meaning the wrong thing.
- [Isolation](https://nativesandbox.dev/guides/isolation.md): What is taken away from every sandbox, what is left, and the one option that changes the boundary rather than narrowing it.
- [Reclaiming](https://nativesandbox.dev/guides/reclaiming.md): Idle stop, a hard maximum lifetime, and why a container fleet needs both when a microVM fleet does not.
- [Errors](https://nativesandbox.dev/operations/errors.md): The five error codes, what each one means, and which of them is worth retrying.
- [Troubleshooting](https://nativesandbox.dev/operations/troubleshooting.md): The failures that cost the most time, and what each one actually means.
- [Sandboxes](https://nativesandbox.dev/api-reference/sandboxes.md): The runtime: creates sandboxes, finds them again, removes them.
- [Sandbox](https://nativesandbox.dev/api-reference/sandbox.md): One sandbox: a running container with a workspace directory mounted into it.
- [Types, units and the engine](https://nativesandbox.dev/api-reference/types.md): Everything else the package exports: units, errors, constants, and the raw engine connection.
- [Changelog](https://nativesandbox.dev/changelog.md): Releases of nativesandbox.