Get Started
Create your first sandbox and connect to it in a couple of minutes.
A sandbox is an isolated Linux VM that runs a container image. You create one, connect over SSH or in your browser, do your work, and delete it when you're done.
Before you start
Install the tektona CLI and sign in:
tektona loginConfirm your org and project:
tektona ctx showCreate your first sandbox
A sandbox boots from any OCI image. This example uses Tektona's desktop image so you can open it in your browser:
tektona sandbox create --image ghcr.io/tektona-ai/desktop-x11:0.4.3It returns a sandbox id and reaches running in seconds. List your sandboxes:
tektona sandbox lsPoint at any public or private OCI image — see Run a Custom Image to boot from your own, including from private registries.
Connect to it
Open the desktop in your browser:
tektona sandbox vnc <sandbox-id> --browserOr get a shell inside the sandbox:
tektona sandbox ssh <sandbox-id>Expose a port
Run something on a port, then mint a shareable preview URL for it:
tektona sandbox preview <sandbox-id> 8080Pass --public at create time for a URL that needs no token. See
Manage Sandboxes for the full command surface.
Clean up
Delete it when you're done:
tektona sandbox delete <sandbox-id>Or pause it to keep its state and free resources, then resume later:
tektona sandbox pause <sandbox-id>tektona sandbox resume <sandbox-id>Where to go next
Run a Custom Image
Boot a sandbox from your own OCI image, including private ones.
Egress network policies
Control which domains and CIDRs a sandbox can reach.
Sharing sandboxes
Share a running sandbox with your project, or hand off ownership.
TypeScript SDK
Create and manage sandboxes programmatically with @tektona/sdk.