Sandboxes

Sandbox environments for isolated task execution.

---

Podman Sandbox

Simple Podman sandbox environment for inspect_ai.

This module provides a minimal PodmanSandboxEnvironment that uses the Podman CLI directly (not podman-compose) for running containers.

class dash_evals.runner.sandboxes.podman.podman.PodmanSandboxEnvironment

Bases: SandboxEnvironment

Simple Podman-based sandbox environment.

__init__(container_id, working_dir='/workspace')

Parameters:

• container_id (str)

• working_dir (str)

classmethod config_files()

Standard config files for this provider (used for automatic discovery)

Return type:

list[str]

classmethod default_concurrency()

Default max_sandboxes for this provider (None means no maximum)

Return type:

int | None

async classmethod task_init(task_name, config)

Validate podman is available.

Return type:

None

Parameters:

• task_name (str)

• config (BaseModel | str | None)

async classmethod sample_init(task_name, config, metadata)

Start a container for this sample.

Return type:

dict[str, SandboxEnvironment]

Parameters:

• task_name (str)

• config (BaseModel | str | None)

• metadata (dict[str, str])

async classmethod sample_cleanup(task_name, config, environments, interrupted)

Stop and remove containers.

Return type:

None

Parameters:

• task_name (str)

• config (BaseModel | str | None)

• environments (dict[str, SandboxEnvironment])

• interrupted (bool)

async classmethod task_cleanup(task_name, config, cleanup)

No task-level cleanup needed - containers are removed per-sample.

Return type:

None

Parameters:

• task_name (str)

• config (BaseModel | str | None)

• cleanup (bool)

async classmethod cli_cleanup(id)

CLI cleanup for orphaned containers.

Return type:

None

Parameters:

id (str | None)

async exec(cmd, input=None, cwd=None, env=None, user=None, timeout=None, timeout_retry=True, concurrency=True, truncate=True)

Execute command inside the container.

Return type:

ExecResult[str]

Parameters:

• cmd (list[str])

• input (str | bytes | None)

• cwd (str | None)

• env (dict[str, str] | None)

• user (str | None)

• timeout (int | None)

• timeout_retry (bool)

• concurrency (bool)

• truncate (bool)

async write_file(file, contents)

Write file to container.

Return type:

None

Parameters:

• file (str)

• contents (str | bytes)

async read_file(file, text=True)

Overloads:

• self, file (str), text (Literal[True]) → str

• self, file (str), text (Literal[False]) → bytes

Parameters:

• file (str)

• text (bool)

Return type:

str | bytes

Read file from container.

async connection(*, user=None)

Get connection info for debugging.

Return type:

SandboxConnection

Parameters:

user (str | None)

default_polling_interval()

Polling interval for sandbox service requests.

Return type:

float

---

Sandbox Provider

dash_evals.runner.sandboxes.provider.podman()