Skip to content
Runtime

Waking a sandbox keeps the egress CA its running processes trust

A sandbox started before 26 October 2026 and woken afterwards was given a new egress CA, and processes that were already running (Node.js with NODE_EXTRA_CA_CERTS, Bun, Python, Go) failed HTTPS requests that use egress secrets with SELF_SIGNED_CERT_IN_CHAIN until they were restarted. A wake now keeps the CA the sandbox already trusts and writes nothing to its trust store. See security.

100 free hoursin your first 30 days.

of a 1 GB machine

  • No credit card
  • Four sandboxes at once, 2 vCPU and 4 GiB each
  • Then prepaid credit from $10, no plan fee
Start free, no card
Start free, no card