logo
registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3
linux/amd64 registry.k8s.io 已验证 · Kubernetes

这个镜像是Kubernetes官方提供的Python运行时沙箱镜像,属于agent-sandbox项目,用于在Kubernetes环境中提供安全隔离的Python运行环境,支持运行Python应用或作为代理沙箱的运行时组件。

15
浏览次数
488.54MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3
源镜像
registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3
镜像ID
sha256:1d6bebe341ea7e174a40a34ae616ae5faed2d2ad1cbd0ddc9df6692e8ae5f52e
镜像 TAG
v0.5.3
镜像大小
488.54MB
平台架构
linux/amd64
镜像源
registry.k8s.io
CMD
uvicorn main:app --host 0.0.0.0 --port 8888 --log-level trace
启动入口
工作目录
/app
OS/平台
linux/amd64
镜像创建
2026-07-14T15:20:00.434014626Z
同步时间
2026-07-29 17:58
浏览量
15 次
贡献者
🔌 开放端口 1
8888/tcp
⚙️ 环境变量 3
KeyValue
PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
PYTHON_VERSION=3.14.6 1
PYTHON_SHA256=143b1dddefaec3bd2e21e3b839b34a2b7fb9842272883c576420d605e9f30c63 2
🛡️ 镜像安全扫描
debian 13.6 Trivy 2026-07-29 17:58 查看完整报告
66
低危 LOW
54
中危 MEDIUM
19
高危 HIGH
4
严重 CRITICAL
受影响目标 (2)
registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3 (debian 13.6) debian Python python-pkg

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3

Shell快速替换命令

sed -i 's#registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3'

镜像构建历史


# 2026-07-14 23:20:00  0.00B 设置默认要执行的命令
CMD ["uvicorn" "main:app" "--host" "0.0.0.0" "--port" "8888" "--log-level" "trace"]
                        
# 2026-07-14 23:20:00  0.00B 声明容器运行时监听的端口
EXPOSE [8888/tcp]
                        
# 2026-07-14 23:20:00  0.00B 指定运行容器时使用的用户
USER 1000
                        
# 2026-07-14 23:20:00  35.32KB 执行命令并创建新的镜像层
RUN /bin/sh -c chown -R 1000:1000 /app # buildkit
                        
# 2026-07-14 23:20:00  6.29KB 复制新文件或目录到容器中
COPY main.py . # buildkit
                        
# 2026-07-14 23:20:00  368.44MB 执行命令并创建新的镜像层
RUN /bin/sh -c pip install --no-cache-dir --require-hashes -r requirements.txt # buildkit
                        
# 2026-07-14 23:19:29  29.02KB 复制新文件或目录到容器中
COPY requirements.txt . # buildkit
                        
# 2026-07-14 23:19:29  722.13KB 执行命令并创建新的镜像层
RUN /bin/sh -c apt-get update     && apt-get install -y --no-install-recommends libgomp1     && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-07-14 23:19:24  0.00B 设置工作目录为/app
WORKDIR /app
                        
# 2026-07-14 10:07:16  0.00B 设置默认要执行的命令
CMD ["python3"]
                        
# 2026-07-14 10:07:16  36.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	for src in idle3 pip3 pydoc3 python3 python3-config; do 		dst="$(echo "$src" | tr -d 3)"; 		[ -s "/usr/local/bin/$src" ]; 		[ ! -e "/usr/local/bin/$dst" ]; 		ln -svT "$src" "/usr/local/bin/$dst"; 	done # buildkit
                        
# 2026-07-14 10:07:16  36.87MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends 		dpkg-dev 		gcc 		gnupg 		libbluetooth-dev 		libbz2-dev 		libc6-dev 		libdb-dev 		libffi-dev 		libgdbm-dev 		liblzma-dev 		libncursesw5-dev 		libreadline-dev 		libsqlite3-dev 		libssl-dev 		libzstd-dev 		make 		tk-dev 		uuid-dev 		wget 		xz-utils 		zlib1g-dev 	; 		wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; 	echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; 	mkdir -p /usr/src/python; 	tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; 	rm python.tar.xz; 		cd /usr/src/python; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	./configure 		--build="$gnuArch" 		--enable-loadable-sqlite-extensions 		--enable-optimizations 		--enable-option-checking=fatal 		--enable-shared 		$(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') 		--with-ensurepip 	; 	nproc="$(nproc)"; 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; 	LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; 	LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; 	case "$arch" in 		amd64|arm64) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; 			;; 		i386) 			;; 		*) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; 			;; 	esac; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-}" 	; 	rm python; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" 		python 	; 	make install; 		cd /; 	rm -rf /usr/src/python; 		find /usr/local -depth 		\( 			\( -type d -a \( -name test -o -name tests -o -name idle_test \) \) 			-o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) 		\) -exec rm -rf '{}' + 	; 		ldconfig; 		apt-mark auto '.*' > /dev/null; 	apt-mark manual $savedAptMark; 	find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' 		| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' 		| sort -u 		| xargs -rt dpkg-query --search 		| awk 'sub(":$", "", $1) { print $1 }' 		| sort -u 		| xargs -r apt-mark manual 	; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; 	apt-get dist-clean; 		export PYTHONDONTWRITEBYTECODE=1; 	python3 --version; 	pip3 --version # buildkit
                        
# 2026-07-14 09:59:55  0.00B 设置环境变量 PYTHON_SHA256
ENV PYTHON_SHA256=143b1dddefaec3bd2e21e3b839b34a2b7fb9842272883c576420d605e9f30c63
                        
# 2026-07-14 09:59:55  0.00B 设置环境变量 PYTHON_VERSION
ENV PYTHON_VERSION=3.14.6
                        
# 2026-07-14 09:59:55  3.81MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		netbase 		tzdata 	; 	apt-get dist-clean # buildkit
                        
# 2026-07-14 09:59:55  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-07-13 08:00:00  78.62MB 
# debian.sh --arch 'amd64' out/ 'trixie' '@1783900800'
                        
                    

镜像信息

{
    "Id": "sha256:1d6bebe341ea7e174a40a34ae616ae5faed2d2ad1cbd0ddc9df6692e8ae5f52e",
    "RepoTags": [
        "registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3"
    ],
    "RepoDigests": [
        "registry.k8s.io/agent-sandbox/python-runtime-sandbox@sha256:c29a57c0e9a32159cf4d86c6fa10986eb914c4d347013849fcdf43c3ba85995c",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox@sha256:e1152c87673aff343b0c5a9f71518cea1f829e55924f33575361eed66f551627"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-07-14T15:20:00.434014626Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "1000",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "8888/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "PYTHON_VERSION=3.14.6",
            "PYTHON_SHA256=143b1dddefaec3bd2e21e3b839b34a2b7fb9842272883c576420d605e9f30c63"
        ],
        "Cmd": [
            "uvicorn",
            "main:app",
            "--host",
            "0.0.0.0",
            "--port",
            "8888",
            "--log-level",
            "trace"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/app",
        "Entrypoint": null,
        "OnBuild": null,
        "Labels": null
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 488537719,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/d374c3ea6a60f03e1157082fc43dd1fb47c3b0238d4dabcbdc1d267a06909087/diff:/var/lib/docker/overlay2/2d60f8cf9cdb75c8eb32cd3e6745c26bcb8ef202d67e054878654a95f0f90955/diff:/var/lib/docker/overlay2/9a8ed184b1ef79645b3a02981bdc6486323de9e23f4ee8cd3fa65bdfc3a5d76b/diff:/var/lib/docker/overlay2/db227bdd4510228697050ca86e79bbb8b8246e7b4886a2d947547df1187e62e6/diff:/var/lib/docker/overlay2/76c271aaa124f34309234aa03de44d57c93c409e11f1b66178eb5fa7988dc819/diff:/var/lib/docker/overlay2/aab2fe318d59107bb11af5a2e802345ff0f90c11517902f580e00e2ba0d6a38c/diff:/var/lib/docker/overlay2/8cd6fdb99af72c77430c3f7495b176f164176004c47f5ce295593e8c2f1cbab0/diff:/var/lib/docker/overlay2/6bf808be31a818696db75cc5572013a3bb86660ac140d017ea65339bda0ab858/diff:/var/lib/docker/overlay2/f24ade665d94e6f8ff29f06c32243f0eb4e1ac8da4feddb1b4ad6020791e6a90/diff",
            "MergedDir": "/var/lib/docker/overlay2/90032c4e585e68e1fa8e917bed015acaae8bc2b920946989d9700a603923d34d/merged",
            "UpperDir": "/var/lib/docker/overlay2/90032c4e585e68e1fa8e917bed015acaae8bc2b920946989d9700a603923d34d/diff",
            "WorkDir": "/var/lib/docker/overlay2/90032c4e585e68e1fa8e917bed015acaae8bc2b920946989d9700a603923d34d/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:f2ec4de84f559f5c7be4233b589cdbdbb5507807e05621b77320edd55a1f2a0f",
            "sha256:04bed2b2c283e9eb813de27850102866d8bc530ae9c84707bbd56d40c92b0768",
            "sha256:f3e1c7200b910fc1580f51cf02a37e2b45054923409927950be67a8d35dc8683",
            "sha256:913a5e9a767299bfa47f77f56be67fcca2094de02ce4ef89fe643578df741d12",
            "sha256:440ce5c15acc09f2bf9baf77e3c04e8e74e35f83d791dd28841f6eecc015e9f3",
            "sha256:4f4c62e75fe053a4a07c614d78c5dd91344d994e6abcc9bce41d1872342e7d75",
            "sha256:280b1347c115c9c3c61af4fbf4bd612134dcb745cf483d9de51c62a1de358479",
            "sha256:f7c44f04f7b55bbd89c411e122b0e66a498a30f0dd4abf66625ea1661a4c6b06",
            "sha256:787917660fd6b11216cd186611d8aa21c115cd3979d81588cf263fba64ecd683",
            "sha256:aa8eac22e1517711e2c7e2eaf29b5833e0f47622bcec88d91de6a14251432fc0"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-07-29T17:58:05.433347986+08:00"
    }
}

更多版本

registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.1.0

linux/amd64 registry.k8s.io505.46MB2026-02-16 20:08
616

registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3

linux/amd64 registry.k8s.io488.54MB2026-07-29 17:58
14
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×