E2B: run model-written code in a sandbox, not on your box

The Stack

Steps

1. 1

   Write the sandbox script and structure-check it

   Write sandbox.py: open an E2B Sandbox with the key from os.environ, run code through it, read the logs. CI compiles it and checks the calls + that the key comes from the environment. Actually running it needs the package and a key, so that step is fenced.

   cat > sandbox.py <<'PY'
   import os
   from e2b_code_interpreter import Sandbox
   
   with Sandbox(api_key=os.environ["E2B_API_KEY"]) as sandbox:
       execution = sandbox.run_code("print(sum(range(10)))")
       print(execution.logs)
   PY
   python3 - <<'CHECK'
   import py_compile, sys
   src = open("sandbox.py").read()
   try:
       py_compile.compile("sandbox.py", doraise=True)
   except py_compile.PyCompileError:
       print("BAD: sandbox.py does not compile"); sys.exit(1)
   def need(tok, msg):
       if tok not in src:
           print("BAD: " + msg); sys.exit(1)
   need("Sandbox", "no E2B Sandbox")
   need("run_code", "the script never runs code in the sandbox")
   if "os.environ" not in src:
       print("BAD: API key is not read from the environment"); sys.exit(1)
   print("config OK: E2B script compiles, runs code in a Sandbox, with the API key read from the environment")
   CHECK

2. 2

   Run a sandbox (the network/execution step, not checked by CI)

   pip install e2b-code-interpreter, set E2B_API_KEY, and run sandbox.py. The code executes in an isolated cloud microVM and streams logs back. The execution is fenced.