4 ms·

It would be nice if there was a way to persist this. There are instances where you want to have either a clean environment to work in or you want to isolate som

It would be nice if there was a way to persist this. There are instances where you want to have either a clean environment to work in or you want to isolate something from your primary machine but you also don't want it to just get destroyed when you are done. Maybe this is a feature of this and I'm just not understanding it properly.

jmkni 4y ago
Isn't that just a virtual machine?
- Dalewyn 4y ago
  In fairness, setting up and maintaining a virtual machine might as well be too much upkeep for the common user. On the other hand, if a user knows what a "sandbox" is (no, not the playground box of sand) they aren't a common user.
- coconut08 4y ago
  This seems to run more seamlessly than a virtual machine. Plus I think this supports hardware acceleration and stuff natively.
- petra 4y ago
  It uses hardware-isolation which i think is more secure.
  - Operyl 4y ago
    That’s what most VM Hypervisor technology already does.
- kritr 4y ago
  It is a Hyper-V backed VA backed VM. It shared memory with the host in the same fashion that WSL does, as opposed to carving out physical memory. We have some additional optimizations to make it snappier than running a full vm.
xuhu 4y ago
As someone noted, running `restart` in the sandbox sounds like it results in Windows preserving the sandbox.
- monsieurbanana 4y ago
  That's not how I'd interpret it, it makes sense that if you restart the sandbox from inside the sandbox it doesn't get destroyed, but it doesn't seem to change anything else. If you shutdown the sandbox from outside it would still be destroyed.
  - kritr 4y ago
    It’s enough to install software that needs restarts, but not for use cases where you need the sandbox across host reboots.
- JonathonW 4y ago
  The sandbox persists through a restart (to allow for the installation of software that requires a reboot) but never persists after Windows Sandbox is closed. That’s the big distinction from Hyper-V or other virtualization products; otherwise, it’s just a Hyper-V VM with a prebaked Windows image and fewer options.
  - easton 4y ago
    Not completely, it uses the Krypton microVM part of Hyper-V that is used for WSL2, Application Guard, and nothing else. I wish I could arbitrarily run Windows microVMs outside of sandbox.
asabla 4y ago
For instances were I want to have a more persisted state I would create a Sandbox file (with file extension .wsb) which just runs a setup script when the environment starts. So basically what you would do with a provisioning script when using VM's. You can find more about it here: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file https://learn.microsoft.com/en-us/windows/security/threat-pr...
naikrovek 4y ago
the entire point is that it doesn't persist. you don't have to clean it up. if you want something to persist, you have Hyper-V.

jmkni 4y ago

Isn't that just a virtual machine?

Dalewyn 4y ago
In fairness, setting up and maintaining a virtual machine might as well be too much upkeep for the common user. On the other hand, if a user knows what a "sandbox" is (no, not the playground box of sand) they aren't a common user.
coconut08 4y ago
This seems to run more seamlessly than a virtual machine. Plus I think this supports hardware acceleration and stuff natively.
petra 4y ago
It uses hardware-isolation which i think is more secure.
- Operyl 4y ago
  That’s what most VM Hypervisor technology already does.
kritr 4y ago
It is a Hyper-V backed VA backed VM. It shared memory with the host in the same fashion that WSL does, as opposed to carving out physical memory. We have some additional optimizations to make it snappier than running a full vm.

xuhu 4y ago

As someone noted, running `restart` in the sandbox sounds like it results in Windows preserving the sandbox.

monsieurbanana 4y ago
That's not how I'd interpret it, it makes sense that if you restart the sandbox from inside the sandbox it doesn't get destroyed, but it doesn't seem to change anything else. If you shutdown the sandbox from outside it would still be destroyed.
- kritr 4y ago
  It’s enough to install software that needs restarts, but not for use cases where you need the sandbox across host reboots.
JonathonW 4y ago
The sandbox persists through a restart (to allow for the installation of software that requires a reboot) but never persists after Windows Sandbox is closed. That’s the big distinction from Hyper-V or other virtualization products; otherwise, it’s just a Hyper-V VM with a prebaked Windows image and fewer options.
- easton 4y ago
  Not completely, it uses the Krypton microVM part of Hyper-V that is used for WSL2, Application Guard, and nothing else. I wish I could arbitrarily run Windows microVMs outside of sandbox.

asabla 4y ago

For instances were I want to have a more persisted state I would create a Sandbox file (with file extension .wsb) which just runs a setup script when the environment starts. So basically what you would do with a provisioning script when using VM's. You can find more about it here: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file https://learn.microsoft.com/en-us/windows/security/threat-pr...

naikrovek 4y ago

the entire point is that it doesn't persist. you don't have to clean it up. if you want something to persist, you have Hyper-V.