FAQ

Is a sandbox a container? No. Each one is a KVM virtual machine with its own kernel, so Docker, systemd, /dev/kvm and kernel modules work as on any Linux machine. See Security and isolation.

Do I get root? Yes. You log in as user, with passwordless sudo.

How long can a sandbox run? As long as you like: there's no session limit. Every sandbox has an auto-stop timer, 1 hour after each start by default, up to 30 days, or no auto-stop at all (--ttl, --no-auto-stop, froog extend NAME --hours N). It counts from the start, not from activity. A running agent prompt holds it off. During the free trial it's 2 hours at most.

Do programs keep running across a stop? Only through a warm resume, a start within 10 minutes of the stop. Otherwise a start boots from the disk, which keeps every file.

What does a stopped sandbox cost? Nothing. Its disk is kept 14 days for free. Save a snapshot to keep it longer.

Is my data backed up? Snapshots are copied off the machine that runs the sandbox to separate storage, encrypted, usually within minutes of being taken, so a failed machine doesn't lose them. Anything written after the last snapshot isn't copied yet, and snapshots aren't a backup service: keep work you can't lose in git, or download it.

Does a sandbox have its own IP address? Its own public IPv6 address, yes. SSH answers on it, and any port you open with froog port open. Over IPv4 it shares the address of the machine it runs on with other sandboxes: SSH reaches it on its own port of that address, and each port you open gets its own public port there too (froog port list NAME shows 27015/udp at 203.0.113.7:40002). Those numbers differ from yours and can change when the sandbox starts on another machine. See Open ports.

Can a sandbox send email? Not over port 25, which is blocked. Use your email provider's API or its submission port (587 or 465).

Can I run a web server or a webhook receiver? Yes: froog host NAME PORT gives the port an HTTPS URL, websockets included. For a raw TCP or UDP port (a game server, say), froog port open NAME 27015/udp opens it on the sandbox's IPv6 address and on a public port of the machine's IPv4 address (froog port list NAME shows which).

Are there GPUs? No.

Can I change a sandbox's size? Yes, while it's stopped: froog start NAME --size large.

Can I use my Claude or ChatGPT subscription instead of an API key? Yes. Log in inside the sandbox once (froog ssh NAME, then claude or codex). The login stays on its disk, so forks and restarts keep it.

How do I move files in and out? froog scp, git inside the sandbox, the file API, or signed download and upload URLs.

Can froog see what's in my sandbox? froog's control plane holds a key to each sandbox, which it uses to run your exec commands, files, setup and public URLs, and froog's operators run the machines. Commands run through froog are kept in your command history unless monitoring is off. See Security and isolation.

Which operating systems? Ubuntu 24.04 (the default) or 26.04, Debian 13, and Omarchy (Arch Linux). No Windows or macOS sandboxes, though the CLI runs on Windows, macOS and Linux.