Issues

• chore(server): remove unused openshell-server-macros crate

  area:gatewaystate:acceptedtech-debt
  Task

  NVIDIA/OpenShell#4815 · Filter by author mrunalp opened on Oct 21, 2026
  

• feat(gateway): refuse to start without user authentication unless allow_unauthenticated_users is set

  area:gatewaystate:acceptedtopic:security
  Enhancement

  NVIDIA/OpenShell#4814 · Filter by author mrunalp opened on Oct 21, 2026
  1

• feat(gateway): validate Cloudflare Access edge JWTs instead of trusting the proxy

  area:gatewaystate:acceptedtopic:security
  Enhancement

  NVIDIA/OpenShell#4813 · Filter by author mrunalp opened on Oct 21, 2026

• Add Podman driver support to the OpenShell snap

  state:triage-needed
  NVIDIA/OpenShell#4810 · Filter by author olivercalder opened on Oct 21, 2026

• feat(crypto): add an opt-in system OpenSSL backend

  state:triage-needed
  NVIDIA/OpenShell#4809 · Filter by author varshaprasad96 opened on Oct 21, 2026

• docs/e2e: privileged SCC grant for openshell-sandbox may be obsolete after SCC-aware UID resolution

  state:accepted
  NVIDIA/OpenShell#4808 · Filter by author gmenher opened on Oct 21, 2026

• Directory downloads should retry into a fresh staging directory

  state:triage-needed
  NVIDIA/OpenShell#4805 · Filter by author Aliciapet11 opened on Oct 21, 2026
  1

• Support prebound proxy listeners and per-connection identity

  NVIDIA/OpenShell#4804 · Filter by author shiju-nv opened on Oct 21, 2026

• chore(deps): refresh SDK toolchains and container trust stores

  NVIDIA/OpenShell#4800 · Filter by author alangou opened on Oct 21, 2026

• feat(driver-tensorlake): add a Tensorlake compute driver that runs sandboxes in remote microVMs

  state:triage-needed
  NVIDIA/OpenShell#4795 · Filter by author shanshantensorlake-spec opened on Oct 21, 2026
  1

• feat: expose current and candidate effective policies to validate-phase gateway interceptors

  state:triage-needed
  NVIDIA/OpenShell#4793 · Filter by author mohamed-gradient opened on Oct 21, 2026

• refactor: prototype a unified sandbox launch identity

  NVIDIA/OpenShell#4786 · Filter by author drew opened on Oct 21, 2026

• refactor(middleware)!: remove legacy HTTP hooks in 0.2.0

  area:supervisortopic:l7
  Task

  NVIDIA/OpenShell#4781 · Filter by author pimlock opened on Oct 21, 2026 · OpenShell 0.2.0
  

• feat(vm): let operators re-sign openshell-driver-vm with the hardened runtime and only the hypervisor entitlement

  state:triage-needed
  NVIDIA/OpenShell#4772 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(vm): creating a sandbox from a local Docker image reports the bootstrap image as "Image pulled" and shows no export progress

  state:triage-needed
  NVIDIA/OpenShell#4771 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(gateway): Ctrl+C on a foreground gateway fails to clean up its ephemeral (--no-keep) MicroVM sandbox and leaves it in Error

  state:triage-needed
  NVIDIA/OpenShell#4770 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(server): after a compute-driver change the gateway deletes stopped sandboxes created by the previous driver

  state:triage-needed
  NVIDIA/OpenShell#4769 · Filter by author vineethsai7 opened on Oct 20, 2026

• bug(install): install.sh prints gawk "escape sequence \. treated as plain ." warnings on RPM hosts

  state:triage-needed
  NVIDIA/OpenShell#4768 · Filter by author vineethsai7 opened on Oct 20, 2026

• feat(sandbox): add explicit suspend and resume lifecycle

  NVIDIA/OpenShell#4763 · Filter by author drew opened on Oct 20, 2026

• docs: route main documentation to the Windows release branch

  NVIDIA/OpenShell#4756 · Filter by author shailendra-nv opened on Oct 20, 2026

• docs(windows): establish branch-specific top-level Windows guidance

  NVIDIA/OpenShell#4755 · Filter by author shailendra-nv opened on Oct 20, 2026

• Make install.sh (optionally) interactive

  NVIDIA/OpenShell#4752 · Filter by author krishicks opened on Oct 20, 2026

• docs(codex): document secure integration for the managed app-server daemon

  state:triage-needed
  NVIDIA/OpenShell#4751 · Filter by author itdove opened on Oct 20, 2026

• feat(kubernetes): configure sandbox-supervisor pod anti-affinity

  state:triage-needed
  NVIDIA/OpenShell#4749 · Filter by author russellb opened on Oct 20, 2026

• feat(observability): surface Kubernetes scheduling status while a sandbox pod is Pending/unscheduled

  state:accepted
  Enhancement

  NVIDIA/OpenShell#4746 · Filter by author jhjaggars opened on Oct 20, 2026
  2