Repository navigation
ateapi should pass resolved sandbox assets to atelet.RestoreRequest #1835
Description
Motivation
- Today, when restoring an existing snapshot, atelet takes the sandbox binaries and pause image from manifest.json in object storage and fetches them. This is a privilege escalation risk: a malicious snapshot can make atelet download attacker-controlled binaries and run them as the gVisor runtime on the worker.
- To upgrade the sandbox assets of an existing actor, we need to cold boot it from different assets than the ones in its snapshot.
Changes needed
- Add to RestoreRequest a sandbox_assets field. Same message the existing RunRequest.
- ateapi populates the RestoreRequest by resolving the SandboxAssets from the ActorTemplate.
- atelet should use the SandboxAssets from the RestoreRequest instead of the one in manifest.json.
Activity
BenTheElder commentedon Sep 23, 2026
We should actually move everything from the manifest into the ate-api, now that we have a snapshot API.
bradib0y commentedon Sep 23, 2026
I started working on this. I'm a senior devops eng, but new to open source
shrutiyam-glitch commentedon Sep 24, 2026
Hi bradib0y ! Welcome, and thanks for offering to help out! Since this is required for our next milestone, I'll be taking this one on myself as the assignee.
We'd be thrilled to have your contributions on other issues! Feel free to check out our open issues without an assignee.
cc: Aditya Shantanu (@aditya-shantanu)
feat(ateapi): send resolved sandbox assets during restore (agent-subs…
bradib0y commentedon Sep 26, 2026
Thank you for the info Shrutiya Mohan (@shrutiyam-glitch) , you are very welcoming and encouraging.
Past few days I've been learning about the project, I built my own lab env with some agents living-and-dying, dashboard ...etc. I think I'm gonna start shipping soon 🚢