Sealos Devbox Sandbox Configuration
Use Sealos Devbox as the FastGPT sandbox
This feature is available only to commercial edition users. Contact support to request a key. Billing is usage-based and deducted from your Sealos balance.
Prerequisites
- FastGPT commercial edition is deployed, and the team has Agent Sandbox access.
- Request Sealos Devbox connection details from support: Devbox service URL, access token, and runtime image.
- Follow OpenSandbox Configuration to deploy
fastgpt-agent-sandbox-proxy.
Configure FastGPT Environment Variables
Add the following environment variables to fastgpt-app and fastgpt-pro .
# Use Sealos Devbox as the Agent Sandbox provider
AGENT_SANDBOX_PROVIDER=sealosdevbox
# Sealos Devbox Server API URL provided by support. The FastGPT main service must be able to access it.
AGENT_SANDBOX_SEALOS_BASEURL=https://devbox-server.example.com
# Access token provided by support
AGENT_SANDBOX_SEALOS_TOKEN=replace_with_sealos_devbox_token
# Sandbox image version
AGENT_SANDBOX_SEALOS_IMAGE=hub.hzh.sealos.run/labring/devbox-sandbox:v0.2.0
# Per-instance Devbox resource limits. Storage size is in Gi.
AGENT_SANDBOX_CPU_COUNT=1
AGENT_SANDBOX_MEMORY_MIB=2048
AGENT_SANDBOX_STORAGE_SIZE_GI=1FAQ
AGENT_SANDBOX_PROXY_URL or AGENT_SANDBOX_PREVIEW_PROXY_URL is required
After AGENT_SANDBOX_PROVIDER=sealosdevbox is enabled, fastgpt-app requires AGENT_SANDBOX_PROXY_SECRET, AGENT_SANDBOX_PROXY_URL, and AGENT_SANDBOX_PREVIEW_PROXY_URL, while fastgpt-pro requires AGENT_SANDBOX_PREVIEW_PROXY_URL. The proxy secret must match the value configured for fastgpt-agent-sandbox-proxy and contain at least 32 characters.
AGENT_SANDBOX_SEALOS_IMAGE is required
The sealosdevbox provider requires AGENT_SANDBOX_SEALOS_IMAGE . Use the Agent Sandbox runtime image provided by support or the image that matches your current FastGPT version.
Browser WebSocket connection fails
Check that the proxy service is reachable from the browser and that your reverse proxy supports WebSocket Upgrade. If FastGPT is accessed over HTTPS, AGENT_SANDBOX_PROXY_URL should use wss:// to avoid mixed-content blocking.
proxy validation fails or returns 401
Make sure AGENT_SANDBOX_PROXY_SECRET is exactly the same in the FastGPT main service and fastgpt-agent-sandbox-proxy , and that it is at least 32 characters long.