crucible

REST API for the crucible daemon, a Firecracker microVM sandbox runtime. The daemon is the contract every SDK mirrors. Auth is a bearer token (Authorization: Bearer <key>); /healthz is always exempt, and a loopback daemon with no keys configured serves unauthenticated. The exec and service-log endpoints stream a binary frame protocol OpenAPI cannot model — see the guides for the frame format.

• Version: 0.3.4

images

• GET List cached images
• POST Pull and convert an OCI image
• POST Import a docker-save archive
• GET Get a cached image
• DELETE Delete a cached image

logs

• GET Read durable sandbox logs

meta

• GET Liveness check
• GET List rootfs profiles
• GET Effective policy for the caller

sandboxes

• GET List sandboxes
• POST Create a sandbox
• GET Get a sandbox
• DELETE Destroy a sandbox
• GET Interactive exec (WebSocket)
• POST Run a command (streams frames)
• GET Read a single guest file
• POST Push files into a sandbox

service

• GET Service status
• PUT Configure the supervised service
• GET Stream service logs
• POST Restart the service
• POST Start the service
• POST Stop the service

snapshots

• POST Snapshot a sandbox
• GET List snapshots
• GET Get a snapshot
• DELETE Delete a snapshot
• POST Fork sandboxes from a snapshot