# Deploying Sandbox

Choose and prepare a sandbox runtime for self-hosted Sandbox

Sandbox runs generated code in isolated sandboxes and sends sandbox network traffic through an egress proxy.
Self-hosted deployments can run these sandboxes in Kubernetes or Docker.

<CardGroup cols={2}>
  <Card title="Kubernetes" icon="dharmachakra" href="/deployment/local/craft_kubernetes">
    Deploy sandbox pods, the proxy, RBAC, and workers with the Quor Helm chart.
  </Card>

  <Card title="Docker Compose" icon="docker" href="/deployment/local/craft_docker_compose">
    Run sandbox containers and the proxy on a trusted single Docker host.
  </Card>
</CardGroup>

<Tip>
  Use Kubernetes if more than a few people will use Sandbox, especially when they may work concurrently.
  Each active user needs a sandbox, so Docker Compose is best suited to small, single-host deployments.
</Tip>

| | Kubernetes | Docker Compose |
| --- | --- | --- |
| Sandbox runtime | One pod per active user | One container per active user |
| Recommended for | Production and multi-node deployments | Single-host self-hosted deployments |
| Provisioning | Quor Helm chart | `onyx-cli deploy install --include-craft` |
| Host access | Kubernetes API through scoped RBAC | Docker socket access on the host |

## Requirements

Both deployment paths require:

- A full Quor deployment with the vector database and background workers. Sandbox does not run on Quor Lite.
- A supported Quor release and matching application and sandbox image versions.
- An Quor URL that the sandbox runtime can reach, configured as `SANDBOX_API_SERVER_URL`.
- Capacity for a sandbox per active Sandbox user.
- An Anthropic, OpenAI, or OpenRouter provider configured after deployment.

<Warning>
  Sandboxes execute model-generated code. Review [Sandbox Architecture](/security/architecture/craft)
  before enabling Sandbox, especially the sandbox, network, credential, and sharing boundaries.
</Warning>

## After the runtime is ready

<Steps>
  <Step title="Configure a model">
    In **Admin Panel → Language Models**, add an Anthropic, OpenAI,
    or OpenRouter provider and make at least one model available to your Sandbox users.
  </Step>

  <Step title="Configure workspace access">
    Open **Admin Panel → Sandbox → Access**. Keep the workspace default off for a limited rollout,
    or enable Sandbox for everyone.
  </Step>

  <Step title="Run a complete test">
    As an enabled user, start a Sandbox session, send a prompt that creates a file, and open or download the result.
  </Step>

  <Step title="Add Apps and Skills">
    Configure external services under **Admin Panel → Sandbox → Apps** and reusable workflows under **Sandbox → Skills**.
  </Step>
</Steps>

<CardGroup cols={2}>
  <Card title="Managing Sandbox" icon="sliders" href="/admins/managing_features/craft">
    Configure access, models, Apps, and workspace instructions.
  </Card>

  <Card title="Sandbox Architecture" icon="diagram-project" href="/security/architecture/craft">
    Understand sandbox isolation, egress, credentials, and approvals.
  </Card>
</CardGroup>