OpenShellThis page lists the host platform, compute driver, software, runtime, and kernel requirements for running OpenShell.
OpenShell publishes multi-architecture gateway images for linux/amd64 and linux/arm64. The CLI, package-managed gateway, and standalone gateway binary are supported on the following host platforms:
On Linux, the openshell CLI is a static musl binary and does not require glibc at runtime.
OpenShell publishes standalone openshell-gateway release assets for manual download on these platforms:
These artifacts are attached to GitHub releases. Kubernetes deployments should use the Helm chart and the published gateway image.
On Linux, openshell-gateway requires glibc 2.31 or newer. Compatible systems include, for example, Ubuntu 20.04+, RHEL 9+, Amazon Linux 2023+, and Fedora 32+.
The gateway can manage sandboxes through several compute drivers.
Install the software for the compute driver you use:
Sandbox container images are maintained in the openshell-community repository. Refer to that repository for the current list of installed components and their versions.
OpenShell publishes the gateway image for linux/amd64 and linux/arm64.
The Helm chart in deploy/helm/openshell deploys the gateway StatefulSet, service account, service, persistent storage, and network policy for Kubernetes.
Sandbox images are maintained separately in the openshell-community repository.
To override the default image references, use Helm values:
OpenShell enforces sandbox isolation through two Linux kernel security modules:
On macOS, these kernel modules run inside the Docker Desktop Linux VM, not on the host kernel.
For the full list of supported agents and their default policy coverage, refer to the Supported Agents page.
