Hivebox

by TetiAI

Native Linux sandboxing built for the AI era.

HiveBox turns Linux into a platform where sandboxing is a first-class primitive. No containers, no VMs — just direct kernel isolation (namespaces, cgroups, seccomp, Landlock) exposed through a simple CLI and REST API.

Each hivebox is a lightweight, isolated Linux sandbox with its own OpenCode AI agent. Launch thousands on a single host — each running arbitrary commands in complete isolation with near-zero overhead, and each with a dedicated AI coding assistant accessible via API or the built-in web dashboard.

Stop sandboxing everything.

The AI industry has a proportionality problem. Every major platform spins up full Ubuntu containers — mounted filesystems, browsers, CLI tools, isolated networks — for every user interaction. A .pptx, a .docx, a .xlsx, a PDF, a CSV export. Tasks that take milliseconds with a lightweight library are burning entire virtual machines in the cloud.

To generate a 10-slide presentation, a small virtual computer boots. To format a Word document with headers, a container spins up. To create a spreadsheet with a few formulas, an isolated network is allocated. None of this requires a sandbox. It requires a function call.

The hidden cost is real:

• A single AI query consumes 10x more energy than a traditional search
• Running workloads in Docker containers produces a measurable increase in energy consumption vs. bare Linux, due to I/O overhead
• U.S. AI data centers are projected to emit 24-44 million metric tons of CO2/year by 2030 and consume water equivalent to 6-10 million Americans (Cornell, 2025)

But when you do need isolation — running untrusted code, AI agents executing arbitrary commands, multi-tenant environments — you need it done right, and you need it done light.

HiveBox is the proportionate answer: kernel-native isolation with near-zero overhead. No container runtime. No hypervisor. Just the Linux kernel doing what it already knows how to do.

	Docker	gVisor	Firecracker	Daytona	HiveBox
Memory per sandbox	~50 MB	~30 MB	~5 MB	~50 MB+ (Docker-based)	~2-5 MB
Startup time	~1 s	~0.5 s	~125 ms	~90 ms (warm)	~10-50 ms
Isolation	Namespaces	Syscall emulation	Hypervisor	Docker (managed)	NS + seccomp + Landlock
Self-hosted	Yes	Yes	Yes	Yes (cloud also available, pay-per-second)	Yes
Complexity	High	Medium	Medium	High (requires Docker Compose)	Low

Same security. A fraction of the resources. The smartest infrastructure is the one that uses the minimum needed for the task.

Deploy

One command on any Linux VPS (Ubuntu, Debian, etc.):

curl -fsSL https://raw.githubusercontent.com/TetiAI/hivebox/main/scripts/setup.sh | sudo bash

This installs Docker (if needed), pulls the latest image, generates an API key, and starts HiveBox. The dashboard is available at http://your-server:7070/dashboard.

To pass custom configuration:

curl -fsSL https://raw.githubusercontent.com/TetiAI/hivebox/main/scripts/setup.sh | \
  HIVEBOX_API_KEY=your-key \
  HIVEBOX_OPENCODE_API_KEY=sk-... \
  HIVEBOX_OPENCODE_MODEL=your-model \
  HIVEBOX_PACKAGES="python3 nodejs git" \
  sudo -E bash