k8e

分类: 开发与编程 | 上传者: xiaods | 下载: 0 | 版本: v1.0（最新）

该项目通过“k8e-sandbox”MCP 技能提供了一个隔离的沙箱，用于安全执行代码。

更新日志: Source: GitHub https://github.com/xiaods/k8e

目录结构

当前层级: tree/main/

📁 .github/
- 📁 workflows/
  - 📄 release.yml 2.7 KB
  - 📄 testing.yml 1.5 KB
📁 cmd/
- 📁 agent/
  - 📄 main.go 463 B
- 📁 cert/
  - 📄 main.go 505 B
- 📁 completion/
  - 📄 main.go 411 B
- 📁 containerd/
  - 📄 main.go 137 B
- 📁 ctr/
  - 📄 main.go 82 B
- 📁 encrypt/
  - 📄 main.go 668 B
- 📁 etcdsnapshot/
  - 📄 main.go 564 B
- 📁 k8e/
  - 📄 main.go 13.4 KB
  - 📄 main_linux.go 337 B
  - 📄 main_test.go 1.2 KB
  - 📄 main_windows.go 443 B
- 📁 kubectl/
  - 📄 main.go 90 B
- 📁 server/
  - 📄 main.go 2.1 KB
- 📁 token/
  - 📄 main.go 544 B
📁 contrib/
- 📁 util/
  - 📄 check-config.sh 12.9 KB
  - 📄 generate-custom-ca-certs.sh 10.5 KB
  - 📄 init-os-config.sh 3.9 KB
  - 📄 rotate-default-ca-certs.sh 4.9 KB
- 📄 install.sh 15.2 KB
📁 docs/
- 📁 assets/
  - 📄 k8e-archv2.drawio 2.1 KB
  - 📄 k8e-archv2.png 48.9 KB
  - 📄 k8e-logo.png 1.1 MB
- 📄 kip-1-native-etcd-storage-client.md 8.1 KB
- 📄 kip-2-upgrade-dependencies-to-kubernetes-1.35.md 40.6 KB
- 📄 kip-3-agentic-ai-sandbox-matrix.md 52.9 KB
- 📄 kip-4-sandbox-mcp-skill.md 12.1 KB
- 📄 sandbox-mcp-quickstart.md 2.6 KB
📁 hack/
- 📁 airgap/
  - 📄 generate-list.sh 151 B
  - 📄 image-list.txt 288 B
  - 📄 volume-test.yaml 559 B
- 📄 binary_size_check.sh 852 B
- 📄 boilerplate.go.txt 564 B
- 📄 crdgen.go 238 B
- 📄 download 1.7 KB
- 📄 generate 133 B
- 📄 package-airgap.sh 599 B
- 📄 package-cli 1.6 KB
- 📄 version.sh 2.7 KB
📁 manifests/
- 📁 metrics-server/
  - 📄 aggregated-metrics-reader.yaml 421 B
  - 📄 auth-delegator.yaml 302 B
  - 📄 auth-reader.yaml 323 B
  - 📄 metrics-apiservice.yaml 292 B
  - 📄 metrics-server-deployment.yaml 2.3 KB
  - 📄 metrics-server-service.yaml 394 B
  - 📄 resource-reader.yaml 553 B
- 📁 sandbox-matrix/
  - 📄 crds.yaml 4.3 KB
  - 📄 grpc-gateway.yaml 2.3 KB
  - 📄 network-policy.yaml 391 B
  - 📄 runtimeclasses.yaml 362 B
- 📄 ccm.yaml 1.9 KB
- 📄 cilium.yaml 618 B
- 📄 coredns.yaml 4.9 KB
- 📄 local-storage.yaml 3.7 KB
- 📄 rolebindings.yaml 1.0 KB
- 📄 runtimes.yaml 927 B
📁 pkg/
- 📁 agent/
  - 📁 config/
    
    📄 config.go 27.1 KB
    
    📄 config_internal_test.go 1.3 KB
    
    📄 config_linux.go 1.5 KB
    
    📄 config_linux_test.go 4.2 KB
    
    📄 config_windows.go 1.6 KB
  - 📁 containerd/
    
    📄 command.go 213 B
    
    📄 command_windows.go 100 B
    
    📄 config.go 9.1 KB
    
    📄 config_linux.go 4.7 KB
    
    📄 config_test.go 34.9 KB
    
    📄 config_windows.go 1.7 KB
    
    📄 containerd.go 13.0 KB
    
    📄 runtimes.go 3.3 KB
    
    📄 runtimes_test.go 3.2 KB
    
    📄 selinux.go 463 B
  - 📁 cri/
    
    📄 cri.go 738 B
    
    📄 cri_linux.go 894 B
    
    📄 cri_windows.go 840 B
  - 📁 cridockerd/
    
    📄 config_linux.go 1.1 KB
    
    📄 config_windows.go 246 B
    
    📄 cridockerd.go 2.1 KB
  - 📁 https/
    
    📄 https.go 4.1 KB
  - 📁 loadbalancer/
    
    📄 config.go 727 B
    
    📄 loadbalancer.go 6.7 KB
    
    📄 loadbalancer_test.go 7.4 KB
    
    📄 servers.go 10.5 KB
    
    📄 servers_test.go 4.0 KB
    
    📄 utility.go 975 B
    
    📄 utility_windows.go 162 B
    
    📄 utlity_linux.go 293 B
  - 📁 proxy/
    
    📄 apiproxy.go 6.3 KB
  - 📁 syssetup/
    
    📄 setup.go 1.7 KB
  - 📁 templates/
    
    📄 templates.go 3.0 KB
    
    📄 templates_linux.go 4.6 KB
    
    📄 templates_windows.go 4.7 KB
  - 📁 tunnel/
    
    📄 tunnel.go 14.0 KB
  - 📁 util/
    
    📄 file.go 804 B
    
    📄 strings.go 319 B
  - 📄 run.go 17.1 KB
  - 📄 run_linux.go 1.2 KB
  - 📄 run_windows.go 1.1 KB
- 📁 apis/
  - 📁 k8e.cattle.io/
    
    📁 v1/
    
    📄 doc.go 674 B
    
    📄 types.go 4.7 KB
    
    📄 zz_generated_deepcopy.go 7.2 KB
    
    📄 zz_generated_list_types.go 1.7 KB
    
    📄 zz_generated_register.go 1.9 KB
    
    📄 zz_generated_register.go 722 B
- 📁 authenticator/
  - 📁 basicauth/
    
    📄 basicauth.go 1.5 KB
    
    📄 basicauth_test.go 3.5 KB
    
    📄 interfaces.go 958 B
  - 📁 hash/
    
    📄 hash.go 339 B
    
    📄 scrypt.go 1.8 KB
    
    📄 scrypt_test.go 718 B
  - 📁 passwordfile/
    
    📄 passwordfile.go 2.8 KB
    
    📄 passwordfile_test.go 3.9 KB
  - 📄 authenticator.go 1.6 KB
- 📁 bootstrap/
  - 📄 bootstrap.go 2.4 KB
  - 📄 bootstrap_test.go 824 B
- 📁 certmonitor/
  - 📄 certmonitor.go 4.9 KB
- 📁 cgroups/
  - 📄 cgroups_linux.go 5.6 KB
  - 📄 cgroups_windows.go 188 B
- 📁 cli/
  - 📁 agent/
    
    📄 agent.go 2.1 KB
  - 📁 cert/
    
    📄 cert.go 7.9 KB
  - 📁 cmds/
    
    📄 agent.go 11.0 KB
    
    📄 certs.go 2.4 KB
    
    📄 check-config.go 568 B
    
    📄 completion.go 429 B
    
    📄 config.go 429 B
    
    📄 const_linux.go 127 B
    
    📄 const_windows.go 162 B
    
    📄 cover_default.go 104 B
    
    📄 cover_linux.go 705 B
    
    📄 crictl.go 278 B
    
    📄 ctr.go 276 B
    
    📄 etcd_snapshot.go 5.4 KB
    
    📄 golang.go 823 B
    
    📄 init_default.go 108 B
    
    📄 init_linux.go 691 B
    
    📄 kubectl.go 288 B
    
    📄 log.go 1.5 KB
    
    📄 log_default.go 115 B
    
    📄 log_linux.go 2.5 KB
    
    📄 nostage.go 213 B
    
    📄 root.go 1.3 KB
    
    📄 sandbox_gateway.go 1.5 KB
    
    📄 sandbox_mcp.go 1.5 KB
    
    📄 secrets_encrypt.go 2.6 KB
    
    📄 server.go 20.0 KB
    
    📄 stage.go 403 B
    
    📄 token.go 3.5 KB
  - 📁 completion/
    
    📄 completion.go 2.4 KB
  - 📁 crictl/
    
    📄 crictl.go 230 B
  - 📁 ctr/
    
    📄 ctr.go 144 B
  - 📁 etcdsnapshot/
    
    📄 etcd_snapshot.go 7.3 KB
  - 📁 kubectl/
    
    📄 kubectl.go 156 B
  - 📁 secretsencrypt/
    
    📄 secrets_encrypt.go 5.7 KB
  - 📁 server/
    
    📄 server.go 26.1 KB
  - 📁 token/
    
    📄 token.go 7.2 KB
- 📁 clientaccess/
  - 📄 kubeconfig.go 1.3 KB
  - 📄 token.go 15.0 KB
  - 📄 token_test.go 13.9 KB
- 📁 cloudprovider/
  - 📄 cloudprovider.go 2.3 KB
  - 📄 instances.go 3.9 KB
- 📁 cluster/
  - 📁 managed/
    
    📄 drivers.go 1.2 KB
  - 📄 address_controller.go 1.8 KB
  - 📄 bootstrap.go 16.6 KB
  - 📄 bootstrap_test.go 5.8 KB
  - 📄 cluster.go 5.3 KB
  - 📄 encrypt.go 2.0 KB
  - 📄 etcd.go 164 B
  - 📄 https.go 5.6 KB
  - 📄 managed.go 5.7 KB
  - 📄 router.go 803 B
  - 📄 storage.go 12.0 KB
- 📁 codegen/
  - 📁 cleanup/
    
    📄 main.go 196 B
  - 📄 main.go 1.7 KB
- 📁 configfilearg/
  - 📁 testdata/
    
    📁 data.yaml.d/
    
    📄 01-data.yml 133 B
    
    📄 02-data-ignore-this.txt 16 B
    
    📄 02-data.yaml 95 B
    
    📄 data.yaml 97 B
    
    📄 defaultdata.yaml 117 B
    
    📄 invalid.yaml 8 B
  - 📄 defaultparser.go 1.7 KB
  - 📄 defaultparser_test.go 5.2 KB
  - 📄 parser.go 9.6 KB
  - 📄 parser_test.go 10.8 KB
- 📁 containerd/
  - 📄 builtins.go 2.4 KB
  - 📄 builtins_cri.go 818 B
  - 📄 builtins_linux.go 1.5 KB
  - 📄 builtins_windows.go 896 B
  - 📄 main.go 271 B
  - 📄 none.go 53 B
  - 📄 utility_linux.go 504 B
  - 📄 utility_windows.go 522 B
- 📁 crd/
  - 📄 crds.go 1.7 KB
- 📁 ctr/
  - 📄 main.go 1.1 KB
- 📁 daemons/
  - 📁 agent/
    
    📄 agent.go 1.6 KB
    
    📄 agent_linux.go 6.1 KB
    
    📄 agent_windows.go 3.2 KB
    
    📄 agent_windows_test.go 1002 B
  - 📁 config/
    
    📄 types.go 14.7 KB
    
    📄 types_test.go 2.3 KB
  - 📁 control/
    
    📁 deps/
    
    📄 deps.go 25.5 KB
    
    📄 deps_test.go 1.1 KB
    
    📁 proxy/
    
    📄 proxy.go 901 B
    
    📄 server.go 13.7 KB
    
    📄 tunnel.go 9.6 KB
  - 📁 executor/
    
    📄 embed.go 6.3 KB
    
    📄 etcd.go 1.4 KB
    
    📄 executor.go 6.2 KB
- 📁 data/
  - 📄 data.go 13 B
  - 📄 nostage.go 161 B
- 📁 datadir/
  - 📄 datadir.go 870 B
- 📁 dataverify/
  - 📄 dataverify.go 3.0 KB
- 📁 deploy/
  - 📄 controller.go 16.3 KB
  - 📄 nostage.go 140 B
  - 📄 stage.go 1.0 KB
  - 📄 zz_generated_bindata.go 36.3 KB
- 📁 etcd/
  - 📁 s3/
    
    📄 config_secret.go 3.5 KB
    
    📄 s3.go 18.8 KB
    
    📄 s3_test.go 47.8 KB
  - 📁 snapshot/
    
    📄 types.go 8.3 KB
  - 📄 apiaddresses_controller.go 2.1 KB
  - 📄 etcd.go 50.1 KB
  - 📄 etcd_test.go 23.1 KB
  - 📄 etcdproxy.go 3.6 KB
  - 📄 member_controller.go 5.0 KB
  - 📄 metadata_controller.go 4.1 KB
  - 📄 resolver.go 2.1 KB
  - 📄 snapshot.go 35.5 KB
  - 📄 snapshot_controller.go 11.9 KB
  - 📄 snapshot_handler.go 6.1 KB
- 📁 etcdstorage/
  - 📄 client.go 3.8 KB
- 📁 flock/
  - 📄 flock_other.go 1.2 KB
  - 📄 flock_unix.go 1.5 KB
  - 📄 flock_unix_test.go 1.8 KB
- 📁 generated/
  - 📁 clientset/
    
    📁 versioned/
    
    📁 fake/
    
    📄 clientset_generated.go 3.5 KB
    
    📄 doc.go 683 B
    
    📄 register.go 1.8 KB
    
    📁 scheme/
    
    📄 doc.go 699 B
    
    📄 register.go 1.8 KB
    
    📁 typed/
    
    📁 k8e.cattle.io/
    
    📁 v1/
    
    📁 fake/
    
    📄 doc.go 676 B
    
    📄 fake_addon.go 1.6 KB
    
    📄 fake_etcdsnapshotfile.go 1.8 KB
    
    📄 fake_k8e.cattle.io_client.go 1.2 KB
    
    📄 addon.go 2.5 KB
    
    📄 doc.go 680 B
    
    📄 etcdsnapshotfile.go 3.1 KB
    
    📄 generated_expansion.go 694 B
    
    📄 k8e.cattle.io_client.go 3.0 KB
    
    📄 clientset.go 3.6 KB
  - 📁 controllers/
    
    📁 k8e.cattle.io/
    
    📁 v1/
    
    📄 addon.go 1.1 KB
    
    📄 etcdsnapshotfile.go 7.6 KB
    
    📄 interface.go 1.7 KB
    
    📄 factory.go 1.9 KB
    
    📄 interface.go 1.1 KB
- 📁 kubeadm/
  - 📄 token.go 1.2 KB
  - 📄 types.go 1.9 KB
  - 📄 utils.go 6.7 KB
- 📁 kubectl/
  - 📄 main.go 1.3 KB
- 📁 metrics/
  - 📄 metrics.go 1.5 KB
- 📁 netutil/
  - 📄 iface.go 1.7 KB
- 📁 node/
  - 📄 controller.go 4.5 KB
- 📁 nodeconfig/
  - 📄 nodeconfig.go 4.0 KB
  - 📄 nodeconfig_test.go 4.0 KB
- 📁 nodepassword/
  - 📄 nodepassword.go 3.6 KB
  - 📄 nodepassword_test.go 7.7 KB
- 📁 passwd/
  - 📄 passwd.go 2.6 KB
- 📁 proctitle/
  - 📄 proctile_windows.go 90 B
  - 📄 proctitle.go 157 B
- 📁 profile/
  - 📄 profile.go 1.1 KB
- 📁 rootless/
  - 📄 mounts.go 2.7 KB
  - 📄 portdriver.go 2.2 KB
  - 📄 rootless.go 6.5 KB
  - 📄 rootless_windows.go 142 B
- 📁 rootlessports/
  - 📄 controller.go 3.4 KB
  - 📄 controller_windows.go 297 B
- 📁 sandboxmatrix/
  - 📁 api/
    
    📁 v1alpha1/
    
    📄 doc.go 74 B
    
    📄 register.go 656 B
    
    📄 types.go 3.7 KB
    
    📄 zz_generated_deepcopy.go 5.2 KB
  - 📁 grpc/
    
    📁 pb/
    
    📁 sandbox/
    
    📁 v1/
    
    📄 sandbox.pb.go 38.1 KB
    
    📄 sandbox_grpc.pb.go 19.1 KB
    
    📄 orchestrator.go 11.4 KB
    
    📄 orchestrator_test.go 2.8 KB
    
    📄 server.go 8.4 KB
  - 📄 controller.go 4.2 KB
  - 📄 controller_test.go 3.2 KB
- 📁 sandboxmcp/
  - 📄 client.go 3.1 KB
  - 📄 install.go 3.1 KB
  - 📄 server.go 5.5 KB
  - 📄 tools.go 12.8 KB
- 📁 secretsencrypt/
  - 📄 config.go 9.8 KB
- 📁 server/
  - 📁 auth/
    
    📄 auth.go 2.5 KB
  - 📄 cert.go 8.0 KB
  - 📄 context.go 2.8 KB
  - 📄 router.go 17.9 KB
  - 📄 secrets-encrypt.go 17.7 KB
  - 📄 server.go 19.3 KB
  - 📄 token.go 2.5 KB
  - 📄 types.go 409 B
- 📁 signals/
  - 📄 signal.go 1.2 KB
  - 📄 signal_posix.go 702 B
  - 📄 signal_windows.go 654 B
- 📁 spegel/
  - 📄 bootstrap.go 6.9 KB
  - 📄 registry.go 1.2 KB
  - 📄 spegel.go 10.7 KB
  - 📄 store.go 2.6 KB
- 📁 static/
  - 📄 nostage.go 85 B
  - 📄 stage.go 540 B
  - 📄 zz_generated_bindata.go 5.1 KB
- 📁 token/
  - 📄 read.go 667 B
- 📁 untar/
  - 📄 untar.go 3.7 KB
- 📁 util/
  - 📁 services/
    
    📄 services.go 4.2 KB
    
    📄 services_test.go 7.2 KB
  - 📄 api.go 8.5 KB
  - 📄 apierrors.go 2.9 KB
  - 📄 cert.go 485 B
  - 📄 client.go 2.9 KB
  - 📄 client_test.go 820 B
  - 📄 command.go 452 B
  - 📄 errors.go 172 B
  - 📄 file.go 1.8 KB
  - 📄 gates.go 223 B
  - 📄 gates_test.go 843 B
  - 📄 labels.go 212 B
  - 📄 net.go 11.4 KB
  - 📄 net_test.go 2.0 KB
  - 📄 net_unix.go 429 B
  - 📄 net_windows.go 230 B
  - 📄 reflect.go 158 B
  - 📄 token.go 2.1 KB
- 📁 version/
  - 📄 version.go 677 B
- 📁 vpn/
  - 📄 vpn.go 4.9 KB
📁 proto/
- 📁 sandbox/
  - 📁 v1/
    
    📄 sandbox.proto 2.5 KB
📁 sandbox/
- 📄 Dockerfile 1.6 KB
📁 sandboxd/
- 📁 src/
  - 📄 exec.zig 5.0 KB
  - 📄 exec_test.zig 6.2 KB
  - 📄 files.zig 5.5 KB
  - 📄 files_test.zig 1.1 KB
  - 📄 main.zig 3.4 KB
- 📄 build.zig 1.6 KB
- 📄 sandboxd-check 11.5 MB
📁 tests/
- 📄 unit.go 2.0 KB
📄 .deepsource.toml 145 B
📄 .dockerignore 69 B
📄 .gitignore 374 B
📄 .golangci.json 540 B
📄 build.zig 18.2 KB
📄 go.mod 25.4 KB
📄 go.sum 169.1 KB
📄 LICENSE 11.1 KB
📄 main.go 1.6 KB
📄 Makefile 382 B
📄 README.md 17.6 KB
📄 SKILL.md 2.5 KB

SKILL.md

# K8E Sandbox Skill

This project provides an isolated sandbox for safe code execution via the `k8e-sandbox` MCP skill.

**Always use the sandbox to run code, scripts, or shell commands** instead of executing directly on the host.

## Setup (one-time)

```bash
k8e sandbox-install-skill all
```

This registers the `k8e-sandbox` MCP server in your agent config automatically.

## How to Run Code

Use `sandbox_run` for all code execution tasks:

```
tool: sandbox_run
args: { "code": "<your code>", "language": "python|bash|node" }
```

- Session is created automatically and reused for the entire conversation
- No need to call `sandbox_create_session` manually
- On conversation end, the session is cleaned up automatically

## Common Patterns

**Run Python:**
```json
{ "code": "import pandas as pd; print(pd.__version__)", "language": "python" }
```

**Run shell:**
```json
{ "code": "curl -s https://api.github.com/zen" }
```

**Install packages then run:**
```
1. sandbox_pip_install  { "session_id": "<id>", "packages": ["requests"] }
2. sandbox_exec         { "session_id": "<id>", "command": "python3 -c 'import requests; print(requests.get(\"https://httpbin.org/get\").status_code)'" }
```

**Write a file and execute it:**
```
1. sandbox_write_file  { "session_id": "<id>", "path": "/workspace/main.py", "content": "print('hello')" }
2. sandbox_exec        { "session_id": "<id>", "command": "python3 /workspace/main.py" }
```

**Before irreversible actions** (delete, send, deploy), always call:
```
tool: sandbox_confirm_action
args: { "session_id": "<id>", "action": "describe what you are about to do" }
```

## Check Availability

```
tool: sandbox_status
args: {}
```

Returns `{ "available": true, "session_id": "..." }`.

## All Available Tools

| Tool | When to use |
|---|---|
| `sandbox_run` | ✅ Default — run any code or command |
| `sandbox_status` | Check if sandbox service is reachable |
| `sandbox_write_file` | Write a file to `/workspace` |
| `sandbox_read_file` | Read a file from `/workspace` |
| `sandbox_list_files` | List recently changed files |
| `sandbox_pip_install` | Install Python packages |
| `sandbox_exec` | Run command in an explicit session |
| `sandbox_exec_stream` | Run command with streaming output |
| `sandbox_create_session` | Create session with custom options (runtime, egress) |
| `sandbox_destroy_session` | Explicitly destroy a session |
| `sandbox_run_subagent` | Spawn a child sandbox for parallel tasks (depth ≤ 1) |
| `sandbox_confirm_action` | Require human approval before irreversible operations |

登录后下载/点赞/收藏 ❤ 439 | ★ 0

k8e

目录结构

SKILL.md

举报内容

提示