zozo123 opened a new pull request, #71725: URL: https://github.com/apache/airflow/pull/71725
Adds a hosted Ascii Box backend for `SandboxToolset`, giving containerized Airflow workers a production-capable backend without a local daemon or KVM. ### What changed - maps `SandboxSpec.env` at creation and refuses deny-all / per-domain egress policies Box cannot enforce; - uses native file read/write APIs for paths under `/home/user` or `/tmp`, with shell helpers for parent dirs and listings; - applies the API's command deadline (capped at 600s), destroys timed-out sandboxes, and configures a server-side TTL as the orphan-cleanup backstop; - resolves the optional `ascii-box-sdk` and a generic Airflow connection lazily; and - documents the `sandbox-ascii-box` extra and adds unit plus system coverage. ### Validation - focused unit tests cover connection resolution, fail-closed network policy, command bounding/timeout teardown, file ops, and idempotent delete; - system test DAG exercises all four tools against a real Box when `BOX_API_KEY` is set; - provider import succeeds without the optional Ascii Box SDK; and - Ruff / formatting / docs / provider metadata intended to match the Islo and OpenSandbox backend PRs. Related: #68847 See also: #71672, #71676 --- ##### Was generative AI tooling used to co-author this PR? - [x] Yes — Cursor (Grok) Generated-by: Cursor (Grok) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions) Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
