zozo123 opened a new pull request, #71676: URL: https://github.com/apache/airflow/pull/71676
Adds a self-hosted OpenSandbox backend for `SandboxToolset`, so Airflow workers can use a remote Docker or Kubernetes sandbox service without access to the container runtime. ### What changed - maps `SandboxSpec` environment and network policy at creation, preserving the fail-closed contract; - streams byte-bounded command output and uses OpenSandbox's native file APIs; - applies server-side command deadlines and a server-side sandbox lifetime; - resolves the optional SDK and a generic Airflow connection lazily; and - documents the `sandbox-opensandbox` extra and adds unit plus system coverage. ### Validation - 38 focused unit tests pass with the minimum/current `opensandbox==0.1.15`; - a real OpenSandbox Docker server test passed with authenticated creation, deny-all egress, all backend operations, output truncation, timeout, and idempotent teardown; - the Common AI provider wheel builds with the new extra and backend; and - Ruff, formatting, codespell, YAML/Markdown, provider metadata, dependency, documentation, and system-test hooks pass locally. Related: #68847 --- ##### Was generative AI tooling used to co-author this PR? - [x] Yes — Codex (GPT-5.6) Generated-by: Codex (GPT-5.6) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
