chore: bump execd to v1.0.18

github-actions[bot] · github-actions[bot] · commit 68a5710c5385 · 2026-05-25T04:18:15.000Z
diff --git a/examples/agent-sandbox/README.md b/examples/agent-sandbox/README.md
@@ -23,7 +23,7 @@ opensandbox-server init-config ~/.sandbox.toml --example docker
 ```toml
 [runtime]
 type = "kubernetes"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 [kubernetes]
 namespace = "default"
diff --git a/examples/code-interpreter/README.md b/examples/code-interpreter/README.md
@@ -104,7 +104,7 @@ spec:
             - name: opensandbox-bin
               mountPath: /opt/opensandbox/bin
         - name: execd-installer
-          image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17
+          image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18
           command: [ "/bin/sh", "-c" ]
           args:
             - |
diff --git a/examples/windows/pool-win-example.yaml b/examples/windows/pool-win-example.yaml
@@ -58,7 +58,7 @@ spec:
         command:
         - /bin/sh
         - -c
-        image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17
+        image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18
         name: execd-installer
         volumeMounts:
         - mountPath: /opt/opensandbox/bin
diff --git a/kubernetes/charts/opensandbox-server/values.yaml b/kubernetes/charts/opensandbox-server/values.yaml
@@ -85,7 +85,7 @@ configToml: |
 
   [runtime]
   type = "kubernetes"
-  execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17"
+  execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18"
 
   [kubernetes]
   kubeconfig_path = ""
diff --git a/kubernetes/config/samples/sandbox_v1alpha1_pool.yaml b/kubernetes/config/samples/sandbox_v1alpha1_pool.yaml
@@ -31,7 +31,7 @@ spec:
             - name: opensandbox-bin
               mountPath: /opt/opensandbox/bin
         - name: execd-installer
-          image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17
+          image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18
           command: [ "/bin/sh", "-c" ]
           args:
             - |
diff --git a/kubernetes/config/samples/sandbox_v1alpha1_pool_restart.yaml b/kubernetes/config/samples/sandbox_v1alpha1_pool_restart.yaml
@@ -56,7 +56,7 @@ spec:
           command:
             - /bin/sh
             - -c
-          image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17
+          image: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18
           name: execd-installer
           volumeMounts:
             - mountPath: /opt/opensandbox/bin
diff --git a/oseps/0004-secure-container-runtime.md b/oseps/0004-secure-container-runtime.md
@@ -180,7 +180,7 @@ Extension to `~/.sandbox.toml`. A single `[secure_runtime]` section configures t
 ```toml
 [runtime]
 type = "docker"  # or "kubernetes"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 # Secure container runtime configuration.
 # When enabled, ALL sandboxes on this server use the specified runtime.
@@ -210,7 +210,7 @@ Example 1 — gVisor on Docker:
 # ~/.sandbox.toml
 [runtime]
 type = "docker"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 [secure_runtime]
 type = "gvisor"
@@ -224,7 +224,7 @@ Example 2 — Kata Containers (QEMU) on Kubernetes:
 # ~/.sandbox.toml
 [runtime]
 type = "kubernetes"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 [secure_runtime]
 type = "kata"
diff --git a/oseps/0007-fast-sandbox-runtime-support.md b/oseps/0007-fast-sandbox-runtime-support.md
@@ -611,7 +611,7 @@ api_key = "your-secret-key"
 
 [runtime]
 type = "kubernetes"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 [kubernetes]
 namespace = "default"
diff --git a/server/DEVELOPMENT.md b/server/DEVELOPMENT.md
@@ -61,7 +61,7 @@ This guide provides comprehensive information for developers working on OpenSand
 
    [runtime]
    type = "docker"
-   execd_image = "opensandbox/execd:v1.0.17"
+   execd_image = "opensandbox/execd:v1.0.18"
 
    [docker]
    network_mode = "host"
diff --git a/server/docker-compose.example.yaml b/server/docker-compose.example.yaml
@@ -10,8 +10,8 @@ configs:
 
       [runtime]
       type = "docker"
-      # execd_image = "opensandbox/execd:v1.0.17"
-      execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17"
+      # execd_image = "opensandbox/execd:v1.0.18"
+      execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18"
 
       [egress]
       image = "opensandbox/egress:v1.0.12"
diff --git a/server/opensandbox_server/examples/example.config.k8s.toml b/server/opensandbox_server/examples/example.config.k8s.toml
@@ -32,7 +32,7 @@ level = "INFO"
 
 [runtime]
 type = "kubernetes"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 [storage]
 # Allowlist of host path prefixes permitted for bind mounts.
diff --git a/server/opensandbox_server/examples/example.config.k8s.zh.toml b/server/opensandbox_server/examples/example.config.k8s.zh.toml
@@ -32,7 +32,7 @@ level = "INFO"
 
 [runtime]
 type = "kubernetes"
-execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17"
+execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18"
 
 [storage]
 # 允许进行 bind mount 的宿主机路径前缀白名单。
diff --git a/server/opensandbox_server/examples/example.config.toml b/server/opensandbox_server/examples/example.config.toml
@@ -32,7 +32,7 @@ level = "INFO"
 
 [runtime]
 type = "docker"
-execd_image = "opensandbox/execd:v1.0.17"
+execd_image = "opensandbox/execd:v1.0.18"
 
 [storage]
 # Allowlist of host path prefixes permitted for bind mounts.
diff --git a/server/opensandbox_server/examples/example.config.zh.toml b/server/opensandbox_server/examples/example.config.zh.toml
@@ -32,7 +32,7 @@ level = "INFO"
 
 [runtime]
 type = "docker"
-execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17"
+execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.18"
 
 [storage]
 allowed_host_paths = []
diff --git a/server/tests/test_docker_service.py b/server/tests/test_docker_service.py
@@ -1456,7 +1456,7 @@ async def test_create_sandbox_windows_profile_injects_runtime_defaults(mock_dock
     mock_docker.from_env.return_value = mock_client
 
     cfg = _app_config()
-    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.17"
+    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.18"
     cfg.docker.network_mode = "bridge"
     service = DockerSandboxService(config=cfg)
     request = CreateSandboxRequest(
@@ -1539,7 +1539,7 @@ async def test_create_sandbox_windows_profile_rejects_missing_runtime_devices(mo
     mock_docker.from_env.return_value = mock_client
 
     cfg = _app_config()
-    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.17"
+    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.18"
     cfg.docker.network_mode = "bridge"
     service = DockerSandboxService(config=cfg)
     request = CreateSandboxRequest(
@@ -1578,7 +1578,7 @@ async def test_create_sandbox_windows_profile_rejects_below_minimum_resource_lim
     mock_docker.from_env.return_value = mock_client
 
     cfg = _app_config()
-    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.17"
+    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.18"
     cfg.docker.network_mode = "bridge"
     service = DockerSandboxService(config=cfg)
     request = CreateSandboxRequest(
@@ -1615,7 +1615,7 @@ async def test_create_sandbox_windows_profile_accepts_dockur_demo_like_request(m
     mock_docker.from_env.return_value = mock_client
 
     cfg = _app_config()
-    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.17"
+    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.18"
     cfg.docker.network_mode = "bridge"
     service = DockerSandboxService(config=cfg)
     request = CreateSandboxRequest(
@@ -1669,7 +1669,7 @@ async def test_create_sandbox_windows_profile_with_network_policy_maps_windows_p
     mock_docker.from_env.return_value = mock_client
 
     cfg = _app_config()
-    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.17"
+    cfg.runtime.execd_image = "ghcr.io/opensandbox/execd:v1.0.18"
     cfg.docker.network_mode = "bridge"
     cfg.egress = EgressConfig(image="opensandbox/egress:latest")
     service = DockerSandboxService(config=cfg)
