Issues

• refactor: prototype a unified sandbox launch identity

  NVIDIA/OpenShell#4786 · Filter by author drew opened on Oct 21, 2026

• refactor(middleware)!: remove legacy HTTP hooks in 0.2.0

  area:supervisortopic:l7
  Task

  NVIDIA/OpenShell#4781 · Filter by author pimlock opened on Oct 21, 2026 · OpenShell 0.2.0
  

• feat(vm): let operators re-sign openshell-driver-vm with the hardened runtime and only the hypervisor entitlement

  state:triage-needed
  NVIDIA/OpenShell#4772 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(vm): creating a sandbox from a local Docker image reports the bootstrap image as "Image pulled" and shows no export progress

  state:triage-needed
  NVIDIA/OpenShell#4771 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(gateway): Ctrl+C on a foreground gateway fails to clean up its ephemeral (--no-keep) MicroVM sandbox and leaves it in Error

  state:triage-needed
  NVIDIA/OpenShell#4770 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(server): after a compute-driver change the gateway deletes stopped sandboxes created by the previous driver

  state:triage-needed
  NVIDIA/OpenShell#4769 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(install): install.sh prints gawk "escape sequence \. treated as plain ." warnings on RPM hosts

  state:triage-needed
  NVIDIA/OpenShell#4768 · Filter by author vineethsai7 opened on Oct 20, 2026

• feat(sandbox): add explicit suspend and resume lifecycle

  NVIDIA/OpenShell#4763 · Filter by author drew opened on Oct 20, 2026

• docs: route main documentation to the Windows release branch

  NVIDIA/OpenShell#4756 · Filter by author shailendra-nv opened on Oct 20, 2026

• docs(windows): establish branch-specific top-level Windows guidance

  NVIDIA/OpenShell#4755 · Filter by author shailendra-nv opened on Oct 20, 2026

• Make install.sh (optionally) interactive

  NVIDIA/OpenShell#4752 · Filter by author krishicks opened on Oct 20, 2026

• docs(codex): document secure integration for the managed app-server daemon

  state:triage-needed
  NVIDIA/OpenShell#4751 · Filter by author itdove opened on Oct 20, 2026

• feat(kubernetes): configure sandbox-supervisor pod anti-affinity

  state:triage-needed
  NVIDIA/OpenShell#4749 · Filter by author russellb opened on Oct 20, 2026

• feat(observability): surface Kubernetes scheduling status while a sandbox pod is Pending/unscheduled

  state:accepted
  Enhancement

  NVIDIA/OpenShell#4746 · Filter by author jhjaggars opened on Oct 20, 2026
  2

• bug(supervisor): L7 engine drops request bodies for the sandbox main process

  state:triage-needed
  NVIDIA/OpenShell#4740 · Filter by author osolmaz opened on Oct 20, 2026

• bug(supervisor): an isolation backend's Attach refusal is not reported to the gateway

  NVIDIA/OpenShell#4739 · Filter by author shiju-nv opened on Oct 20, 2026

• bug(gateway): a sandbox whose isolation backend selection changed stays in Starting and never reports the mismatch

  Bug

  NVIDIA/OpenShell#4737 · Filter by author shiju-nv opened on Oct 20, 2026

• feat(policy): freeze a sandbox's effective policy for its lifetime

  NVIDIA/OpenShell#4734 · Filter by author shiju-nv opened on Oct 20, 2026

• Landlock denies reads on bind mounts on Docker Desktop for Mac with VirtioFS file sharing

  state:triage-needed
  Bug

  NVIDIA/OpenShell#4733 · Filter by author kei-yamazaki opened on Oct 20, 2026

• feat: delegate stable sandbox SPIFFE identities from the shared supervisor

  NVIDIA/OpenShell#4731 · Filter by author drew opened on Oct 20, 2026
  1

• feat(cli): stage input files before starting a sandbox main command

  area:cliarea:sandboxstate:triage-needed
  NVIDIA/OpenShell#4730 · Filter by author TaylorMutch opened on Oct 19, 2026
  1

• perf(driver-docker): 250 ms supervisor healthcheck costs ~12% of a CPU core per idle sandbox

  area:computestate:accepted
  NVIDIA/OpenShell#4729 · Filter by author KelvinLin1016 opened on Oct 19, 2026
  1

• bug(docker): recovery stop aborts when supervisor-failure watch restores Error

  state:triage-needed
  NVIDIA/OpenShell#4727 · Filter by author TyceHerrman opened on Oct 19, 2026

• feat(server): make Kubernetes, AWS STS, and Vault integrations optional

  state:triage-needed
  NVIDIA/OpenShell#4723 · Filter by author TyceHerrman opened on Oct 19, 2026

• feat(auth): authenticate gateway-routed sandbox service requests

  NVIDIA/OpenShell#4722 · Filter by author TaylorMutch opened on Oct 19, 2026