logo
registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0
linux/amd64 registry.k8s.io 已验证 · Kubernetes

这个镜像是Kubernetes官方提供的Python运行时沙箱镜像,属于agent-sandbox项目,用于在Kubernetes环境中提供安全隔离的Python运行环境,支持运行Python应用或作为代理沙箱的运行时组件。

9
浏览次数
488.83MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0
源镜像
registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0
镜像ID
sha256:f84dc6a8615a64fd26a6e40ddad7b60c159e883590795e6cef0405459b5b2546
镜像 TAG
v1.0.0
镜像大小
488.83MB
平台架构
linux/amd64
镜像源
registry.k8s.io
CMD
uvicorn main:app --host 0.0.0.0 --port 8888 --log-level trace
启动入口
工作目录
/app
OS/平台
linux/amd64
镜像创建
2026-08-25T18:58:59.771629531Z
同步时间
2026-09-02 11:30
浏览量
9 次
贡献者
🔌 开放端口 1
8888/tcp
⚙️ 环境变量 3
KeyValue
PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
PYTHON_VERSION=3.14.7 1
PYTHON_SHA256=3b48dac8fb59f62eaa67ac83c1eb12bda1b7a08406dd286e252c11a66be27f81 2
🛡️ 镜像安全扫描
debian 13.6 Trivy 2026-09-02 11:30 查看完整报告
75
低危 LOW
63
中危 MEDIUM
18
高危 HIGH
3
严重 CRITICAL
受影响目标 (2)
registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0 (debian 13.6) debian Python python-pkg

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0

Shell快速替换命令

sed -i 's#registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0  registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0'

镜像构建历史


# 2026-08-26 02:58:59  0.00B 设置默认要执行的命令
CMD ["uvicorn" "main:app" "--host" "0.0.0.0" "--port" "8888" "--log-level" "trace"]
                        
# 2026-08-26 02:58:59  0.00B 声明容器运行时监听的端口
EXPOSE [8888/tcp]
                        
# 2026-08-26 02:58:59  0.00B 指定运行容器时使用的用户
USER 1000
                        
# 2026-08-26 02:58:59  38.00KB 执行命令并创建新的镜像层
RUN /bin/sh -c chown -R 1000:1000 /app # buildkit
                        
# 2026-08-26 02:58:59  8.98KB 复制新文件或目录到容器中
COPY main.py . # buildkit
                        
# 2026-08-26 02:58:59  368.55MB 执行命令并创建新的镜像层
RUN /bin/sh -c pip install --no-cache-dir --require-hashes -r requirements.txt # buildkit
                        
# 2026-08-26 02:58:28  29.02KB 复制新文件或目录到容器中
COPY requirements.txt . # buildkit
                        
# 2026-08-26 02:58:28  723.06KB 执行命令并创建新的镜像层
RUN /bin/sh -c apt-get update     && apt-get install -y --no-install-recommends libgomp1     && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-08-26 02:58:23  0.00B 设置工作目录为/app
WORKDIR /app
                        
# 2026-08-25 09:15:06  0.00B 设置默认要执行的命令
CMD ["python3"]
                        
# 2026-08-25 09:15:06  36.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	for src in idle3 pip3 pydoc3 python3 python3-config; do 		dst="$(echo "$src" | tr -d 3)"; 		[ -s "/usr/local/bin/$src" ]; 		[ ! -e "/usr/local/bin/$dst" ]; 		ln -svT "$src" "/usr/local/bin/$dst"; 	done # buildkit
                        
# 2026-08-25 09:15:06  37.03MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends 		dpkg-dev 		gcc 		gnupg 		libbluetooth-dev 		libbz2-dev 		libc6-dev 		libdb-dev 		libffi-dev 		libgdbm-dev 		liblzma-dev 		libncursesw5-dev 		libreadline-dev 		libsqlite3-dev 		libssl-dev 		libzstd-dev 		make 		tk-dev 		uuid-dev 		wget 		xz-utils 		zlib1g-dev 	; 		wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; 	echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; 	mkdir -p /usr/src/python; 	tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; 	rm python.tar.xz; 		cd /usr/src/python; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	./configure 		--build="$gnuArch" 		--enable-loadable-sqlite-extensions 		--enable-optimizations 		--enable-option-checking=fatal 		--enable-shared 		$(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') 		--with-ensurepip 	; 	nproc="$(nproc)"; 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; 	LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; 	LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; 	case "$arch" in 		amd64|arm64) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; 			;; 		i386) 			;; 		*) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; 			;; 	esac; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-}" 	; 	rm python; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" 		python 	; 	make install; 		cd /; 	rm -rf /usr/src/python; 		find /usr/local -depth 		\( 			\( -type d -a \( -name test -o -name tests -o -name idle_test \) \) 			-o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) 		\) -exec rm -rf '{}' + 	; 		ldconfig; 		apt-mark auto '.*' > /dev/null; 	apt-mark manual $savedAptMark; 	find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' 		| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' 		| sort -u 		| xargs -rt dpkg-query --search 		| awk 'sub(":$", "", $1) { print $1 }' 		| sort -u 		| xargs -r apt-mark manual 	; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; 	apt-get dist-clean; 		export PYTHONDONTWRITEBYTECODE=1; 	python3 --version; 	pip3 --version # buildkit
                        
# 2026-08-25 09:08:20  0.00B 设置环境变量 PYTHON_SHA256
ENV PYTHON_SHA256=3b48dac8fb59f62eaa67ac83c1eb12bda1b7a08406dd286e252c11a66be27f81
                        
# 2026-08-25 09:08:20  0.00B 设置环境变量 PYTHON_VERSION
ENV PYTHON_VERSION=3.14.7
                        
# 2026-08-25 09:08:20  3.81MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		netbase 		tzdata 	; 	apt-get dist-clean # buildkit
                        
# 2026-08-25 09:08:20  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-08-24 08:00:00  78.64MB 
# debian.sh --arch 'amd64' out/ 'trixie' '@1787529600'
                        
                    

镜像信息

{
    "Id": "sha256:f84dc6a8615a64fd26a6e40ddad7b60c159e883590795e6cef0405459b5b2546",
    "RepoTags": [
        "registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0"
    ],
    "RepoDigests": [
        "registry.k8s.io/agent-sandbox/python-runtime-sandbox@sha256:ad1ffc3ca963aedaeb327c3d7805e2662c08862ce428761e028e9c9a9afd007e",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/registry.k8s.io/agent-sandbox/python-runtime-sandbox@sha256:e554a00600d9e16d9c37a9f59f47f091ca4945dd774fd856101ecdff222322df"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-08-25T18:58:59.771629531Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "1000",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "8888/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "PYTHON_VERSION=3.14.7",
            "PYTHON_SHA256=3b48dac8fb59f62eaa67ac83c1eb12bda1b7a08406dd286e252c11a66be27f81"
        ],
        "Cmd": [
            "uvicorn",
            "main:app",
            "--host",
            "0.0.0.0",
            "--port",
            "8888",
            "--log-level",
            "trace"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/app",
        "Entrypoint": null,
        "OnBuild": null,
        "Labels": null
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 488829877,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/9b9ae1a1318d82d0eb9b2173282c33fecbd41f75e7086b5615b0f7800e55e6b2/diff:/var/lib/docker/overlay2/a14122b8e87724f01652b4e13b498999761fb4b76ff5547a84b70797a40322d2/diff:/var/lib/docker/overlay2/d8aada53d6c3fda8b310fa44e2736319b8173cb611d66a65e76f041fb9f3a4b8/diff:/var/lib/docker/overlay2/6e456c8337e93fceaacdbd99d76c6f2031a03e0d38456e0d563f29857be051a6/diff:/var/lib/docker/overlay2/6b9cd116e9c510791f158f60715bc49b8592c38052f9fd22e8a6390c026e64e5/diff:/var/lib/docker/overlay2/86b91bc24034538d7b779eebedada9e8f279100ab64bab907dbbdea898ba80ab/diff:/var/lib/docker/overlay2/e536eb90cb1c73c3c3902b09260341664ed72d9fa1bbdb508c766d2c433594ad/diff:/var/lib/docker/overlay2/519f448cca52132a83c73f5b84ebc718c92a78f326e993421b8d14ffe5df75f5/diff:/var/lib/docker/overlay2/c2a696dacdcd5b8480d9f883645aef5d7f18bb808ab62a8bfbe4920c17c72905/diff",
            "MergedDir": "/var/lib/docker/overlay2/801ed6f9b6303d39a85da2592685860e1175f205cb0142f5d0e490b9388ca7d1/merged",
            "UpperDir": "/var/lib/docker/overlay2/801ed6f9b6303d39a85da2592685860e1175f205cb0142f5d0e490b9388ca7d1/diff",
            "WorkDir": "/var/lib/docker/overlay2/801ed6f9b6303d39a85da2592685860e1175f205cb0142f5d0e490b9388ca7d1/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:411a86676185cb54d695a805b238194a64e9b77e0c723f3802fbb87d333ea0b3",
            "sha256:fcc4b440e1cafe5d78e28f44663fdde0d92fcb82d9c9f23f65aa33f5f1107b21",
            "sha256:c91629c78bb5e9beb605dc4d3f61742baed65f833a319ff588878f6b2162b2e1",
            "sha256:a292382a37dc8abd3ecee03ac370cb3658eca6f8d8eeeef55fa84f8bd1bd2bf0",
            "sha256:3d13da8f80f14a9595b7771df020ebfd3284f7322ddd05cc27947c2e8408dfbb",
            "sha256:65d222679ced4ffa8a9d4601ebf860223533ca3797daa1a0eddfc52c6d460337",
            "sha256:dbdb0314707948e8b17e8dea49363666d114a35bc2fac8cc3add6c4a27ab9277",
            "sha256:e5525f8359eaf4031704932657b667dad36a2979e51ea70baf2c796c5dedcfd9",
            "sha256:e12aac6c178e5bf7f93e28e8f3f748430432b02fb9a0430676f8e1baa6533e1c",
            "sha256:f16726cc8551074aceb1a25b03716936f7b339ca4bb319bbeed599395e11f20f"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-09-02T11:30:40.627205083+08:00"
    }
}

更多版本

registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.1.0

linux/amd64 registry.k8s.io505.46MB2026-02-16 20:08
704

registry.k8s.io/agent-sandbox/python-runtime-sandbox:v0.5.3

linux/amd64 registry.k8s.io488.54MB2026-07-29 17:58
139

registry.k8s.io/agent-sandbox/python-runtime-sandbox:v1.0.0

linux/amd64 registry.k8s.io488.83MB2026-09-02 11:30
8
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×