# CubePod > Persistent Writable RootFS MicroVM Execution Platform for AI Agents (100% E2B-compatible superset). Built with Kata Containers, CSI Raw Block dual volumes (`rootfs-pvc` + `workspace-pvc`), single-threaded Rust `podd-init` OverlayFS pivot, Zero-Export ~1s suspend/resume, `<50ms` `PodWarmPool`, `~1s` CoW `fork`, and Zero-Trust `cpodref_` mTLS egress. ## Machine-Readable Specs & Resources - [Full Documentation Bundle (llms-full.txt)](https://cubepod.cubeplex.ai/llms-full.txt): Single-file Markdown corpus of all core guides, SDK docs, Kubernetes CRDs, and Helm values. - [OpenAPI 3.1 Specification](https://cubepod.cubeplex.ai/openapi.yaml): Canonical E2B-compatible superset REST/SSE API contract. - [Interactive API Reference](https://cubepod.cubeplex.ai/api/): Browser-based Scalar OpenAPI 3.1 Explorer. - [Chinese Documentation](https://cubepod.cubeplex.ai/zh/): Simplified Chinese documentation portal. ## Getting Started - [E2B Drop-in Compatibility](https://cubepod.cubeplex.ai/getting-started/e2b-compatibility/): Connect official E2B Python and TypeScript SDKs (e2b, e2b-code-interpreter, @e2b/code-interpreter) and AI agent frameworks to CubePod without code changes. - [Introduction](https://cubepod.cubeplex.ai/getting-started/introduction/): Learn what CubePod is, why long-running AI agents need persistent writable RootFS MicroVMs, and how CubePod unifies E2B compatibility with Kubernetes-native isolation. - [Quickstart](https://cubepod.cubeplex.ai/getting-started/quickstart/): Start a local CubePod stack with Docker Compose, create a persistent sandbox, run commands and code, pause/resume, fork, and launch a browser desktop. ## Core Concepts - [Platform Architecture](https://cubepod.cubeplex.ai/concepts/architecture/): End-to-end architecture of CubePod across the stateless gateway, Kubernetes operator, Kata MicroVMs, CSI Block/Loopback storage, in-guest Rust runtime, and Zero-Trust Egress sidecar. - [Interactive Desktop & Signed Panel Proxy](https://cubepod.cubeplex.ai/concepts/desktop-and-panel-proxy/): How CubePod provides zero-overhead lazy GUI/browser/terminal desktops (Xvfb, Chromium CDP, noVNC, ttyd) and exposes sandbox UIs through HMAC-SHA256 /panel/{token}/ reverse proxying. - [Dual-Volume Persistence](https://cubepod.cubeplex.ai/concepts/dual-volume-persistence/): How CubePod separates the persistent writable OverlayFS RootFS upperdir from /workspace so OS upgrades and RootFS resets never touch user project data. - [In-Guest Runtime (podd-init & podd)](https://cubepod.cubeplex.ai/concepts/in-guest-init-and-podd/): How CubePod injects zero-contamination Rust binaries into stock OCI images, pivots root safely as a single-threaded PID 1, and serves execution, files, quiescing, and code kernels on port 49983. - [Lifecycle, WarmPool, CoW Fork & HA](https://cubepod.cubeplex.ai/concepts/lifecycle-warmpool-fork/): Understand PodBox state transitions, pause-to-zero and auto-resume, sub-50ms PodWarmPool CAS claims, crash-consistent multi-generation CoW forks, and stateless multi-replica gateway HA. - [Zero-Trust Egress & Secret Vault](https://cubepod.cubeplex.ai/concepts/zero-trust-egress/): How CubePod keeps real API secrets out of sandbox memory and disk using cpodref_ placeholders, per-pod mTLS, nftables transparent interception, DNS blocking, and selective HTTPS MITM. ## SDKs, CLI & MCP - [Go SDK & CLI](https://cubepod.cubeplex.ai/sdks/go-and-cli/): Idiomatic Go client library (pkg/client) and the cubepod command-line interface for sandbox lifecycle, archive sync, template builds, and WarmPools. - [MCP Server Integration](https://cubepod.cubeplex.ai/sdks/mcp-server/): Native Model Context Protocol (MCP) JSON-RPC 2.0 stdio server built into the cubepod CLI with full tool schemas for Claude Desktop, Cursor, and Windsurf. - [Python SDK](https://cubepod.cubeplex.ai/sdks/python/): Async-first and synchronous Python client (cubepod) for persistent MicroVM sandboxes, cursor logs, archive sync, CoW forks, desktop sessions, and template builds. - [Template Catalog & Builds](https://cubepod.cubeplex.ai/sdks/templates/): Managing PodTemplates, E2B-compatible template catalog APIs, zero-BuildKit OCI image registration, and rootless BuildKit recipe builds in CubePod. - [TypeScript SDK](https://cubepod.cubeplex.ai/sdks/typescript/): Zero-dependency TypeScript and Node.js 20+ SDK (cubepod) with high-level Sandbox and low-level CubePodClient APIs, streaming Code Interpreter, archive sync, and template builds. ## Deployment & Operations - [Docker Compose Local Development](https://cubepod.cubeplex.ai/deployment/docker-compose/): Run CubePod's Gateway, Controller, and Egress proxy locally using Docker Compose and sparse loopback ext4 volume simulation. - [Kata Containers & Block Storage](https://cubepod.cubeplex.ai/deployment/kata-and-block-storage/): Configure containerd and Kata RuntimeClasses alongside Longhorn V2 SPDK or OpenEBS LVM raw block storage for hardware-isolated CubePod sandboxes. - [Kubernetes & Helm Deployment](https://cubepod.cubeplex.ai/deployment/kubernetes-helm/): Deploy the CubePod operator, gateway, egress proxy, CRDs, and optional rootless BuildKit builder on Kubernetes using Helm. ## Reference - [API Overview](https://cubepod.cubeplex.ai/reference/api-overview/): Complete HTTP, SSE, NDJSON, Connect-RPC, WebSocket/WebRTC Panel Proxy, and Template Build API reference grounded in api/openapi/cubepod-v1.yaml and pkg/gateway. - [Kubernetes CRDs (v1alpha1)](https://cubepod.cubeplex.ai/reference/crds/): Auto-generated field reference for PodBox, PodTemplate, and PodWarmPool from deploy/helm/cubepod/crds/. - [Helm Chart Values](https://cubepod.cubeplex.ai/reference/helm-values/): Complete configuration parameters synced from deploy/helm/cubepod/values.yaml (Chart v0.4.0 / App 0.4.0). ## CubePod Enhancement Proposals (CEPs) - [CEP-0001: In-Guest Persistent OverlayFS Pivot and Loopback Verification (`podd-init`)](https://cubepod.cubeplex.ai/ceps/0001-in-guest-overlayfs-pivot/): CubePod Enhancement Proposal 0001 (implemented, owning area: runtime). - [CEP-0002: In-Guest Execution, Background Process Cursor, and Archive Sync Daemon (`podd`)](https://cubepod.cubeplex.ai/ceps/0002-podd-execution-daemon/): CubePod Enhancement Proposal 0002 (implemented, owning area: runtime). - [CEP-0003: Dual-Block-PVC, Pre-Attached WarmPool, and CoW Fork Kubernetes Operator (`cubepod-controller`)](https://cubepod.cubeplex.ai/ceps/0003-controller-warmpool-and-fork/): CubePod Enhancement Proposal 0003 (implemented, owning area: controller). - [CEP-0004: Unified E2B-Superset Gateway, Local Loopback Runtime, and Signed Panel Proxy (`cubepod-gateway`)](https://cubepod.cubeplex.ai/ceps/0004-gateway-and-panel-proxy/): CubePod Enhancement Proposal 0004 (implemented, owning area: gateway). - [CEP-0005: Zero-Trust Egress Secret Injection (`cpodref_` mTLS Exchange) & Python SDK `v0.1.0`](https://cubepod.cubeplex.ai/ceps/0005-zero-trust-egress-and-sdk/): CubePod Enhancement Proposal 0005 (implemented, owning area: egress). - [podd Native Streaming Archive-Sync and Process Output Tail Enhancements](https://cubepod.cubeplex.ai/ceps/0006-podd-archive-sync/): CubePod Enhancement Proposal 0006 (implemented, owning area: core). - [Local Docker and Sparse Loopback ext4 Runtime Driver](https://cubepod.cubeplex.ai/ceps/0007-docker-loopback-runtime/): CubePod Enhancement Proposal 0007 (implemented, owning area: core). - [Kubernetes API Client, CRD Sync Loop, and Background Reap Worker](https://cubepod.cubeplex.ai/ceps/0008-kube-controller-loop/): CubePod Enhancement Proposal 0008 (implemented, owning area: core). - [Gateway Live podd Proxy Engine and Zero-Trust Egress Sidecar Daemon](https://cubepod.cubeplex.ai/ceps/0009-gateway-egress-sidecar/): CubePod Enhancement Proposal 0009 (implemented, owning area: core). - [End-to-End Real Daemon Integration Suite and CLI Tooling](https://cubepod.cubeplex.ai/ceps/0010-e2e-integration-suite/): CubePod Enhancement Proposal 0010 (implemented, owning area: core). - [Dual-StorageMode Kubernetes Provisioning (Block + Filesystem), Pod Readiness Polling, and Live Gateway-to-Pod Routing](https://cubepod.cubeplex.ai/ceps/0011-k8s-dual-storage-and-live-pod-routing/): CubePod Enhancement Proposal 0011 (implemented, owning area: core). - [Complete Gateway API Surface and Canonical OpenAPI 3.1 Specification](https://cubepod.cubeplex.ai/ceps/0012-complete-gateway-api-and-openapi/): CubePod Enhancement Proposal 0012 (implemented, owning area: core). - [Full-Featured Python SDK (Sync + Async), Go Client SDK (pkg/client), and cubepod CLI (cmd/cubepod)](https://cubepod.cubeplex.ai/ceps/0013-sdk-and-cli-completeness/): CubePod Enhancement Proposal 0013 (implemented, owning area: core). - [Production Helm Chart, CRD Manifests, Multi-Component Dockerfiles, and GitHub Actions CI/CD](https://cubepod.cubeplex.ai/ceps/0014-helm-dockerfiles-and-ci/): CubePod Enhancement Proposal 0014 (implemented, owning area: core). - [Real Kubernetes Cluster (kubectl) Deployment and Live End-to-End Verification Suite](https://cubepod.cubeplex.ai/ceps/0015-k8s-cluster-live-e2e/): CubePod Enhancement Proposal 0015 (implemented, owning area: core). - [OpenEBS LVM-LocalPV Block CSI Provisioning and Live In-Guest OverlayFS Pivot Verification](https://cubepod.cubeplex.ai/ceps/0016-k8s-block-csi-and-overlayfs-live-e2e/): CubePod Enhancement Proposal 0016 (implemented, owning area: core). - [Longhorn V2 SPDK Block CSI Deployment and Live volumeMode Block Verification](https://cubepod.cubeplex.ai/ceps/0017-longhorn-v2-block-verification/): CubePod Enhancement Proposal 0017 (implemented, owning area: storage). - [E2B Drop-in Protocol Compatibility and SDK Interoperability Specification](https://cubepod.cubeplex.ai/ceps/0018-e2b-protocol-compatibility/): CubePod Enhancement Proposal 0018 (implemented, owning area: gateway). - [E2B-Compatible Template Catalog and OCI Image Builds](https://cubepod.cubeplex.ai/ceps/0019-e2b-template-api/): CubePod Enhancement Proposal 0019 (implemented, owning area: gateway). - [Transparent Zero-Trust Egress Interception, Selective HTTPS MITM, and Per-Pod mTLS Secret Lifecycle](https://cubepod.cubeplex.ai/ceps/0020-transparent-zero-trust-egress/): CubePod Enhancement Proposal 0020 (implemented, owning area: egress). - [Interactive Desktop & Browser GUI Stack with Lazy Activation and Panel Streaming](https://cubepod.cubeplex.ai/ceps/0021-interactive-desktop-and-panel-stack/): CubePod Enhancement Proposal 0021 (implemented, owning area: runtime). - [Crash-Consistent Multi-Generation CoW Fork and Stateless Multi-Replica Gateway HA](https://cubepod.cubeplex.ai/ceps/0022-cow-fork-and-stateless-ha-gateway/): CubePod Enhancement Proposal 0022 (implemented, owning area: controller). - [CubePod Enhancement Proposals (CEPs)](https://cubepod.cubeplex.ai/ceps/): Complete index of all implemented CubePod architecture and subsystem Enhancement Proposals (CEP-0001 through CEP-0022).