Create a copy of a sandbox on its host, without a snapshot.

curl --request POST \
  --url https://api.instabox.sh/v1/machines/{id}/fork \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "name": "<string>",
  "vcpus": 123,
  "memMiB": 123,
  "metadata": {},
  "deleteAfterSeconds": 123,
  "autoSuspendAfterSeconds": 123,
  "maxRunMinutes": 123,
  "secrets": "all",
  "envSecrets": [
    "<string>"
  ],
  "directSecrets": [
    {
      "secret": "<string>",
      "env": "<string>",
      "file": "<string>"
    }
  ]
}
'

import requests

url = "https://api.instabox.sh/v1/machines/{id}/fork"

payload = {
    "name": "<string>",
    "vcpus": 123,
    "memMiB": 123,
    "metadata": {},
    "deleteAfterSeconds": 123,
    "autoSuspendAfterSeconds": 123,
    "maxRunMinutes": 123,
    "secrets": "all",
    "envSecrets": ["<string>"],
    "directSecrets": [
        {
            "secret": "<string>",
            "env": "<string>",
            "file": "<string>"
        }
    ]
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: '<string>',
    vcpus: 123,
    memMiB: 123,
    metadata: {},
    deleteAfterSeconds: 123,
    autoSuspendAfterSeconds: 123,
    maxRunMinutes: 123,
    secrets: 'all',
    envSecrets: ['<string>'],
    directSecrets: [{secret: '<string>', env: '<string>', file: '<string>'}]
  })
};

fetch('https://api.instabox.sh/v1/machines/{id}/fork', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.instabox.sh/v1/machines/{id}/fork",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'vcpus' => 123,
    'memMiB' => 123,
    'metadata' => [
        
    ],
    'deleteAfterSeconds' => 123,
    'autoSuspendAfterSeconds' => 123,
    'maxRunMinutes' => 123,
    'secrets' => 'all',
    'envSecrets' => [
        '<string>'
    ],
    'directSecrets' => [
        [
                'secret' => '<string>',
                'env' => '<string>',
                'file' => '<string>'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.instabox.sh/v1/machines/{id}/fork"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"vcpus\": 123,\n  \"memMiB\": 123,\n  \"metadata\": {},\n  \"deleteAfterSeconds\": 123,\n  \"autoSuspendAfterSeconds\": 123,\n  \"maxRunMinutes\": 123,\n  \"secrets\": \"all\",\n  \"envSecrets\": [\n    \"<string>\"\n  ],\n  \"directSecrets\": [\n    {\n      \"secret\": \"<string>\",\n      \"env\": \"<string>\",\n      \"file\": \"<string>\"\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.instabox.sh/v1/machines/{id}/fork")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"vcpus\": 123,\n  \"memMiB\": 123,\n  \"metadata\": {},\n  \"deleteAfterSeconds\": 123,\n  \"autoSuspendAfterSeconds\": 123,\n  \"maxRunMinutes\": 123,\n  \"secrets\": \"all\",\n  \"envSecrets\": [\n    \"<string>\"\n  ],\n  \"directSecrets\": [\n    {\n      \"secret\": \"<string>\",\n      \"env\": \"<string>\",\n      \"file\": \"<string>\"\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.instabox.sh/v1/machines/{id}/fork")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"vcpus\": 123,\n  \"memMiB\": 123,\n  \"metadata\": {},\n  \"deleteAfterSeconds\": 123,\n  \"autoSuspendAfterSeconds\": 123,\n  \"maxRunMinutes\": 123,\n  \"secrets\": \"all\",\n  \"envSecrets\": [\n    \"<string>\"\n  ],\n  \"directSecrets\": [\n    {\n      \"secret\": \"<string>\",\n      \"env\": \"<string>\",\n      \"file\": \"<string>\"\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "<string>",
  "machineId": "<string>",
  "type": "create",
  "state": "queued",
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  },
  "createdAt": "2023-11-07T05:31:56Z",
  "updatedAt": "2023-11-07T05:31:56Z",
  "phase": "<string>",
  "forkInherited": true,
  "trigger": "idle",
  "machine": {
    "id": "<string>",
    "name": "<string>",
    "desiredState": "creating",
    "state": "creating",
    "revision": 123,
    "operationId": "<string>",
    "template": {
      "id": "<string>",
      "version": "<string>",
      "digest": "<string>",
      "kernel": "<string>"
    },
    "spec": {
      "vcpus": 123,
      "memMiB": 123,
      "persistentDiskGiB": 123,
      "rootDiskGiB": 123
    },
    "storage": {
      "sizeGiB": 123,
      "mountPath": "/data",
      "persistent": true,
      "synced": true,
      "snapshotSeq": 123
    },
    "runtime": {
      "ready": true,
      "processesPreserved": true
    },
    "autoSuspendAfterSeconds": 123,
    "maxRunMinutes": 1073741823,
    "runStartedAt": "2023-11-07T05:31:56Z",
    "cooldownUntil": "2023-11-07T05:31:56Z",
    "metadata": {},
    "vault": true,
    "guestUser": "alice",
    "orgId": "<string>",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "snapshot": {
      "id": "<string>"
    },
    "image": {
      "id": "<string>"
    },
    "lastError": {
      "code": "unauthenticated",
      "message": "<string>",
      "requestId": "<string>",
      "retryable": true,
      "operationId": "<string>",
      "reason": "missing_key",
      "hint": "<string>",
      "docs": "<string>",
      "docs_url": "<string>",
      "requiredScopes": [
        "<string>"
      ],
      "retryAfterSeconds": 2,
      "at": "2023-11-07T05:31:56Z"
    },
    "archiveAt": "2023-11-07T05:31:56Z",
    "deleteAt": "2023-11-07T05:31:56Z",
    "readyAt": "2023-11-07T05:31:56Z",
    "cooldownReason": "abuse_egress_blocklist",
    "abuseLock": {
      "at": "2023-11-07T05:31:56Z",
      "explanation": "<string>",
      "what": "<string>",
      "appeal": "<string>",
      "dst": "<string>",
      "port": 123,
      "kind": "<string>",
      "count": 123,
      "coreShare": 123,
      "process": "<string>",
      "pool": "<string>"
    },
    "autoSuspendedAt": "2023-11-07T05:31:56Z",
    "envNames": [
      "<string>"
    ],
    "free": true,
    "earlyAllowanceEnded": true,
    "oomKills": 123,
    "lastOom": {
      "at": "2023-11-07T05:31:56Z",
      "pid": 123,
      "process": "<string>",
      "rssBytes": 123,
      "anonRssBytes": 123,
      "cgroup": true,
      "uid": 123
    }
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

Lifecycle

Create a copy of a sandbox on its host, without a snapshot.

Creates a new sandbox with copies of a running or stopped sandbox’s system files and storage (/data, HOME included). The node-agent clones the disks copy-on-write on the source’s host (a running source’s files are frozen for a moment, as for a live snapshot) and cold boots the copy: no snapshot is saved, uploaded or downloaded, and none counts toward the snapshot limit. Memory and running programs are not copied. {id} is the source’s ID or name. The answer is the create operation (machineId is the new sandbox); the fork is a create for every limit (starts a minute, concurrency, storage). It carries metadata instabox-fork-of = the source’s ID. It keeps the source’s idle auto-suspend, max run, metadata and delete deadline (the same instant) unless the request sets autoSuspendAfterSeconds, maxRunMinutes, metadata or deleteAfterSeconds; inherited values are checked against the plan exactly as a create’s, and a refusal of one says it came from the source. It takes the source’s org Secrets selection (proxy and direct references, by name; values are resolved again for the fork) unless the request names its own secrets, envSecrets or directSecrets. 409 fork_unavailable (nothing created): the source is suspended or has no host, or its host cannot fork; save a snapshot and create from it instead. A fork is made only on its source’s host: when that host is under maintenance or full, the request (or the operation) is 409 fork_unavailable, retryable with Retry-After, reason source_host_unavailable or source_host_full; stop and start the source to move it, or save a snapshot and create from it. A source stopped moments ago may still be uploading its disks in the background: the request waits for that upload (as snapshot save does); one still running after that is 409 operation_conflict, retryable, with Retry-After (nothing created). The same conflict fails the operation when the source’s host is still busy with it when the fork is copied; that fork is then deleted. API keys: needs one of the scopes machines:write.

POST

machines

{id}

fork

Create a copy of a sandbox on its host, without a snapshot.

curl --request POST \
  --url https://api.instabox.sh/v1/machines/{id}/fork \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "name": "<string>",
  "vcpus": 123,
  "memMiB": 123,
  "metadata": {},
  "deleteAfterSeconds": 123,
  "autoSuspendAfterSeconds": 123,
  "maxRunMinutes": 123,
  "secrets": "all",
  "envSecrets": [
    "<string>"
  ],
  "directSecrets": [
    {
      "secret": "<string>",
      "env": "<string>",
      "file": "<string>"
    }
  ]
}
'

import requests

url = "https://api.instabox.sh/v1/machines/{id}/fork"

payload = {
    "name": "<string>",
    "vcpus": 123,
    "memMiB": 123,
    "metadata": {},
    "deleteAfterSeconds": 123,
    "autoSuspendAfterSeconds": 123,
    "maxRunMinutes": 123,
    "secrets": "all",
    "envSecrets": ["<string>"],
    "directSecrets": [
        {
            "secret": "<string>",
            "env": "<string>",
            "file": "<string>"
        }
    ]
}
headers = {
    "Idempotency-Key": "<idempotency-key>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    name: '<string>',
    vcpus: 123,
    memMiB: 123,
    metadata: {},
    deleteAfterSeconds: 123,
    autoSuspendAfterSeconds: 123,
    maxRunMinutes: 123,
    secrets: 'all',
    envSecrets: ['<string>'],
    directSecrets: [{secret: '<string>', env: '<string>', file: '<string>'}]
  })
};

fetch('https://api.instabox.sh/v1/machines/{id}/fork', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.instabox.sh/v1/machines/{id}/fork",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'name' => '<string>',
    'vcpus' => 123,
    'memMiB' => 123,
    'metadata' => [
        
    ],
    'deleteAfterSeconds' => 123,
    'autoSuspendAfterSeconds' => 123,
    'maxRunMinutes' => 123,
    'secrets' => 'all',
    'envSecrets' => [
        '<string>'
    ],
    'directSecrets' => [
        [
                'secret' => '<string>',
                'env' => '<string>',
                'file' => '<string>'
        ]
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.instabox.sh/v1/machines/{id}/fork"

	payload := strings.NewReader("{\n  \"name\": \"<string>\",\n  \"vcpus\": 123,\n  \"memMiB\": 123,\n  \"metadata\": {},\n  \"deleteAfterSeconds\": 123,\n  \"autoSuspendAfterSeconds\": 123,\n  \"maxRunMinutes\": 123,\n  \"secrets\": \"all\",\n  \"envSecrets\": [\n    \"<string>\"\n  ],\n  \"directSecrets\": [\n    {\n      \"secret\": \"<string>\",\n      \"env\": \"<string>\",\n      \"file\": \"<string>\"\n    }\n  ]\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.instabox.sh/v1/machines/{id}/fork")
  .header("Idempotency-Key", "<idempotency-key>")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"name\": \"<string>\",\n  \"vcpus\": 123,\n  \"memMiB\": 123,\n  \"metadata\": {},\n  \"deleteAfterSeconds\": 123,\n  \"autoSuspendAfterSeconds\": 123,\n  \"maxRunMinutes\": 123,\n  \"secrets\": \"all\",\n  \"envSecrets\": [\n    \"<string>\"\n  ],\n  \"directSecrets\": [\n    {\n      \"secret\": \"<string>\",\n      \"env\": \"<string>\",\n      \"file\": \"<string>\"\n    }\n  ]\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.instabox.sh/v1/machines/{id}/fork")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Idempotency-Key"] = '<idempotency-key>'
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"name\": \"<string>\",\n  \"vcpus\": 123,\n  \"memMiB\": 123,\n  \"metadata\": {},\n  \"deleteAfterSeconds\": 123,\n  \"autoSuspendAfterSeconds\": 123,\n  \"maxRunMinutes\": 123,\n  \"secrets\": \"all\",\n  \"envSecrets\": [\n    \"<string>\"\n  ],\n  \"directSecrets\": [\n    {\n      \"secret\": \"<string>\",\n      \"env\": \"<string>\",\n      \"file\": \"<string>\"\n    }\n  ]\n}"

response = http.request(request)
puts response.read_body

{
  "id": "<string>",
  "machineId": "<string>",
  "type": "create",
  "state": "queued",
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  },
  "createdAt": "2023-11-07T05:31:56Z",
  "updatedAt": "2023-11-07T05:31:56Z",
  "phase": "<string>",
  "forkInherited": true,
  "trigger": "idle",
  "machine": {
    "id": "<string>",
    "name": "<string>",
    "desiredState": "creating",
    "state": "creating",
    "revision": 123,
    "operationId": "<string>",
    "template": {
      "id": "<string>",
      "version": "<string>",
      "digest": "<string>",
      "kernel": "<string>"
    },
    "spec": {
      "vcpus": 123,
      "memMiB": 123,
      "persistentDiskGiB": 123,
      "rootDiskGiB": 123
    },
    "storage": {
      "sizeGiB": 123,
      "mountPath": "/data",
      "persistent": true,
      "synced": true,
      "snapshotSeq": 123
    },
    "runtime": {
      "ready": true,
      "processesPreserved": true
    },
    "autoSuspendAfterSeconds": 123,
    "maxRunMinutes": 1073741823,
    "runStartedAt": "2023-11-07T05:31:56Z",
    "cooldownUntil": "2023-11-07T05:31:56Z",
    "metadata": {},
    "vault": true,
    "guestUser": "alice",
    "orgId": "<string>",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "snapshot": {
      "id": "<string>"
    },
    "image": {
      "id": "<string>"
    },
    "lastError": {
      "code": "unauthenticated",
      "message": "<string>",
      "requestId": "<string>",
      "retryable": true,
      "operationId": "<string>",
      "reason": "missing_key",
      "hint": "<string>",
      "docs": "<string>",
      "docs_url": "<string>",
      "requiredScopes": [
        "<string>"
      ],
      "retryAfterSeconds": 2,
      "at": "2023-11-07T05:31:56Z"
    },
    "archiveAt": "2023-11-07T05:31:56Z",
    "deleteAt": "2023-11-07T05:31:56Z",
    "readyAt": "2023-11-07T05:31:56Z",
    "cooldownReason": "abuse_egress_blocklist",
    "abuseLock": {
      "at": "2023-11-07T05:31:56Z",
      "explanation": "<string>",
      "what": "<string>",
      "appeal": "<string>",
      "dst": "<string>",
      "port": 123,
      "kind": "<string>",
      "count": 123,
      "coreShare": 123,
      "process": "<string>",
      "pool": "<string>"
    },
    "autoSuspendedAt": "2023-11-07T05:31:56Z",
    "envNames": [
      "<string>"
    ],
    "free": true,
    "earlyAllowanceEnded": true,
    "oomKills": 123,
    "lastOom": {
      "at": "2023-11-07T05:31:56Z",
      "pid": 123,
      "process": "<string>",
      "rssBytes": 123,
      "anonRssBytes": 123,
      "cgroup": true,
      "uid": 123
    }
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

{
  "error": {
    "code": "unauthenticated",
    "message": "<string>",
    "requestId": "<string>",
    "retryable": true,
    "operationId": "<string>",
    "reason": "missing_key",
    "hint": "<string>",
    "docs": "<string>",
    "docs_url": "<string>",
    "requiredScopes": [
      "<string>"
    ],
    "retryAfterSeconds": 2,
    "at": "2023-11-07T05:31:56Z"
  }
}

Authorizations

Authorization

string

header

required

Opaque instabox access token (1 hour). Refresh with /v1/auth/refresh (refresh token valid 30 days, rotates on use).

Headers

Idempotency-Key

string

required

Client-generated key, 1-200 printable ASCII characters, scoped to the user. Same key and same method+path+body returns the original response; same key with a different request returns 409 idempotency_conflict. Records are kept for 7 days.

Required string length: 1 - 200

Pattern: ^[\x21-\x7e]+$

Path Parameters

string

required

Sandbox ID (m_ + 26 lowercase base32 characters).

Pattern: ^m_[a-z2-7]{26}$

Body

application/json

name

string

The new sandbox's name (as in CreateMachineRequest). Absent: <source>-fork- and 4 random hex digits.

vcpus

integer

With memMiB, one of the org's sizes. Absent: the source's size.

memMiB

integer

metadata

object

Labels added to the source's (a key here replaces the source's), at most 31 keys here and 32 in all (instabox-fork-of is set to the source's ID). Absent: the source's labels.

Show child attributes

deleteAfterSeconds

integer

As in CreateMachineRequest (60-86400). Absent or 0: the source's delete deadline, the same instant (none if the source has none); a source due within 60 seconds is then refused with 400.

autoSuspendAfterSeconds

integer

As in CreateMachineRequest. Absent: the source's (0, off, when it has none), checked against the plan as a create's.

maxRunMinutes

integer

As in CreateMachineRequest. Absent: the source's (the plan default when it has none), checked as a create's.

secrets

The fork's own proxy selection, as in CreateMachineRequest. Absent together with envSecrets and directSecrets: the source's selection is copied.

Allowed value: "all"

envSecrets

string[]

As in CreateMachineRequest.

A unique environment variable name within an org. The names a sandbox's env reserves are reserved (shell variables such as PATH, HOME, BASH_ENV, ENV and IFS, session and trust-store variables, and INSTABOX_ and SSH_ prefixes). A Secret saved under a name before it was reserved is not delivered: the machine's guest status names it.

Pattern: ^[A-Za-z_][A-Za-z0-9_]{0,127}$

directSecrets

object[]

As in CreateMachineRequest; alone, it selects no proxy Secrets.

Maximum array length: 64

Show child attributes

Response

The fork's create operation.

The progress of a change to a sandbox (suspend is pause; restore puts its disks back to a snapshot's; move, admin only, copies it to another host pool). It does not return the request it was queued with (a start's vcpus/memMiB show in the sandbox's spec).

string

required

machineId

string

required

type

enum<string>

required

Available options:

create,

start,

stop,

suspend,

resume,

delete,

restore,

resize,

move

state

enum<string>

required

succeeded and failed are terminal.

Available options:

queued,

running,

succeeded,

failed

error

object | null

required

Show child attributes

createdAt

string<date-time>

required

updatedAt

string<date-time>

required

phase

string

Free text progress, e.g. scheduling, booting, waiting_ready, snapshotting.

forkInherited

boolean

On the answer to POST /v1/machines/{id}/fork: the control host that took it keeps the source's delete deadline, idle auto-suspend, max run and metadata, and takes autoSuspendAfterSeconds and maxRunMinutes. Absent: a host from before that (during a rolling control deploy), which gave the fork its defaults with only the request's metadata and deleteAfterSeconds; set the idle auto-suspend and max run with PATCH /v1/machines/{id}.

trigger

enum<string>

Set when instabox started the operation itself: idle (paused when idle), max_run (maximum continuous runtime), memory_pressure (paused, its processes kept, because the host it ran on was running out of memory; the next use wakes it, as after idle), request (wake on use), wake (POST /v1/machines/{id}/wake), timeout, archive, delete_at (the sandbox's deleteAt passed), drain (maintenance by an admin), user_delete (an admin deleted the owner), user_disable (an admin disabled the owner), admin (an admin stopped or paused the sandbox), admin_delete (an admin deleted the sandbox), credit (its free-tier org used up the month's included usage), spend_cap, downgrade, subscription_ended, payment_method (its free workspace has no card on file), members (its free workspace has more members than the free plan allows), early_allowance_ended (paused because the account's early free-sandbox allowance ended and it has more free sandboxes than the free plan runs), abuse_pool (paused because the sandbox tried to connect to a blocked destination on the egress blocklist, such as a crypto-mining pool; a DNS lookup of a listed domain never suspends) or abuse_cpu (paused by the CPU abuse detector: a restricted account's sandbox ran flat out for an hour with no memory use, no public port, nobody using it and a connection to a mining port) or abuse_scan (paused by the flow detector: a restricted account's sandbox swept one port across many hosts, scanned many ports of one host or brute-forced a login port). Absent: a client request.

Available options:

idle,

max_run,

memory_pressure,

timeout,

archive,

delete_at,

drain,

request,

wake,

user_delete,

user_disable,

admin,

admin_delete,

credit,

spend_cap,

downgrade,

subscription_ended,

payment_method,

members,

early_allowance_ended,

abuse_pool,

abuse_cpu,

abuse_scan,

abuse_proxy

machine

object

The sandbox as it is when GET /v1/operations/{id} is read. Included when the operation succeeded, the sandbox still exists, and the caller may read sandboxes (machines:read for API keys). Later operations can change it; it is not a record of the state at completion. Absent otherwise, and from older servers.

Show child attributes