sandstorm

Run thousands of AI agent sandboxes on the cheapest machines.

⭐ 4,793 stars on GitHub · 🍴 389 forks · 📜 License: apache-2.0 · 💻 Language: Rust

What is sandstorm?

An encrypted self-hosted backup tool — automated backups for servers, files, DBs with deduplication for space efficiency.

Main components

• One master, many nodes. The master keeps desired state in SQLite and places sandboxes. Nodes join by address and pairing code, or dial out from behind NAT.
• Wake on traffic. A gateway on the sandbox's node wakes it and forwards the request.
• Node self-protection. Nodes refuse new work when memory runs low, so SSH stays reachable.
• One binary. sandstormd serves as the master, node, and web console.
• Tuned for each backend. gVisor and Firecracker each get their own optimizations.

The biggest strength is deduplication + encryption — 80-90% smaller backups vs raw copies.

Best for sysadmins running VPS, anyone wanting encrypted incremental daily backups automated.

Topics: the project is tagged with popular topics:

• 🏷️ agent-infrastructure
• 🏷️ ai-agents
• 🏷️ checkpoint-restore
• 🏷️ code-execution
• 🏷️ gvisor
• 🏷️ rust
• 🏷️ sandbox
• 🏷️ self-hosted
• 🏷️ snapshot

Quick install

See the README for detailed install instructions. Most projects support Docker — if the repo has a Dockerfile, use:

git clone https://github.com/deeplethe/sandstorm.git
cd sandstorm
docker build -t sandstorm .
docker run -d -p 8080:8080 sandstorm

Minimum system requirements

⚡ Deploy fast on VSIS

Use the VSIS VPS Lite 2GB RAM / 2 vCPU / 25GB SSD (~104k/tháng) plan from VSIS.NET — high-speed VN-based VPS, 24/7 support, ideal for running sandstorm smoothly.

🎯 Benefits:

• One-command docker compose up -d deploy in 2 minutes
• Dedicated IPv4, root access, unmetered domestic bandwidth
• Daily snapshot backup
• Free install assistance from the VSIS team

👉 See matching VPS plans at vsis.net

Resources

• 🔗 GitHub: deeplethe/sandstorm
• 📚 Official docs: see README in the repo
• 💬 Community: GitHub Issues + Discussions

Article compiled from GitHub data on 05/11/2026. Star/fork counts may have changed — see live numbers via the GitHub link.