Instruqt Docs
PlatformGithub
Search…
Overview
Getting started
Set up Instruqt
Quickstart
How-to guides
Build tracks
Manage sandboxes
Integrate external systems
Migrate from Katacoda
Concepts
Sandboxes
Sandbox hosts
Sandbox host machine types
Tracks
Challenges
Lifecycle scripts
Templates
Reference
Team settings
Instruqt CLI
Instruqt platform
GraphQL API
Webhooks
Resources
FAQ
Glossary
Powered By GitBook
Sandboxes
This pages describes sandboxes, which provide the environment for tracks.

What is a sandbox?

A sandbox is a self-contained environment created using actual products to match real-world scenarios. A sandbox can contain sandbox hosts which are containers or virtual machines. And you can add multiple hosts to a sandbox.
Learners can access sandboxes using only a web browser. And with sandboxes, learners can experiment and learn without setting up anything themselves and worrying about breaking things.
See the overview for where the sandbox fits into the Instruqt environment.

Sandbox resources

A sandbox is made up of the following resources:
  • Containers
  • Virtual machines
  • Cloud accounts:
    • Google Cloud Platform (GCP) project
    • AWS account
    • Azure subscription
Check these topics for more information about containers and virtual machines:
​
And check the cloud accounts topics for more information about cloud accounts.

Appearance

🌐 Web UI
💻 Instruqt CLI
In the Web UI, the sandbox appears within a track in the Sandbox tab:
1
sandboxcontainer
2
├── 01-creating-a-directory
3
│ ├── assignment.md
4
│ ├── check-container
5
│ ├── cleanup-container
6
│ ├── setup-container
7
│ └── solve-container
8
├── config.yml
9
└── track.yml
Copied!
In Instruqt CLI, the sandbox appears as the config.yml file (line 8) in the main directory of the track.

Sandbox properties

You specify a sandbox by setting its properties through the Web UI or Instruqt CLI.
For Web UI, you will find the properties as fields in the Sandbox tab of the Track details. For Instruqt CLI, you will find the properties in the configuration file config.yml as in this example:
YAML
1
version: "3"
2
containers:
3
- name: container
4
image: ubuntu
5
shell: /bin/bash
6
memory: 256
Copied!
The following tables show the sandbox properties grouped by resource:
🌐 Web UI
💻 Instruqt CLI

Container

Field
Description
Type
Required
Name
Name of the container. Visible to learners and becomes the short DNS hostname of the container.
string
Required
Image
The container image URL to use for this container.
string
Required
Entrypoint
Set the container's ENTRYPOINT. If not specified, the container image's default is used.
string
Optional
Cmd
Set the container's CMD. If not specified, the container image's default is used.
string
Optional
Shell
Set the command to run as a shell for the learner. If not specified, /bin/sh is used.
string
Optional
Ports
Ports to expose.
list
Optional
Environment Variables
A map of key-value pairs that will be injected as environment variables.
map
Optional
Memory
The memory limit for the container in MB. The maximum is 10240 MB.
integer
Required
​

Virtual machine

Field
Description
Type
Required
Name
Name of the virtual machine. Visible to learners and becomes part of the short DNS hostname of the virtual machine.
string
Required
Image
The Google Compute Engine image to use for this virtual macine. Instruqt needs permission to pull the image.
string
Required
Machine type
The machine type of the virtual machine. Overview of all supported machine types (up to 32 vCPUs and 28.8 GB memory)
string
Required
Environment Variables
A map of key-value pairs that will be injected as environment variables.
map
Optional
Shell
Defaults to /bin/sh for maximum compatibility. Set this to /bin/bash for more features.
string
Optional
Allow external ingress
Allow inbound traffic from external sources. Valid options: • http • https • high-ports This feature is documented on the networking page: usage instructions.
[]string
Optional
​

GCP project

Field
Description
Type
Required
Name
The name of the GCP project.
string
Required
Services
Use this field to enable services on the Google Cloud project. For a list of available services, visit the API library page or run gcloud services list --available. 🚫You can not enable serviceusage.googleapis.com
list
Optional
​

AWS account

Field
Description
Type
Required
Name
The name of the AWS account.
string
Required
IAM Policy
The Identity and Access Management (IAM) Policy document that will be attached to the account. This can be specified as either YAML or JSON.
string
Optional
Managed Policies
A list of all managed policies that will be attached to the account. An overview of all policies can be found in the AWS Console (requires log in)​
list
Optional
SCP Policy
The Service Control Policies (SCP) Policy document that will be attached to the account
string
Optional
​

Azure subscription

Field
Description
Type
Required
Name
The name of the Azure subscription.
string
Required
User
Only create an Azure Active Diretory (AAD) user, without an Azure Subscription. Useful when you only need an AAD user, for instance when using Azure DevOps.
boolean
Optional
Assigned Roles
A list of roles that will be attached to the account. You can use any built-in Azure IAM roles, such as Contributor or Owner. See https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles for details on the available roles.
list
Optional

Container

Main property: containers:
Sub properties:
Property
Description
Type
Required
name
Name of the container. Visible to learners and becomes the short DNS hostname of the container.
string
Required
image
The container image URL to use for this container.
string
Required
entrypoint
Set the container's ENTRYPOINT. If not specified, the container image's default is used.
string
Optional
cmd
Set the container's CMD. If not specified, the container image's default is used.
string
Optional
shell
Set the command to run as a shell for the learner. If not specified, /bin/sh is used.
string
Optional
ports
Ports to expose.
list
Optional
environment
A map of key-value pairs that will be injected as environment variables.
map
Optional
memory
The memory limit for the container in MB. The maximum is 10240 MB.
integer
Optional
​

Example config.yml

YAML
1
version: "3"
2
containers:
3
- name: container
4
image: ubuntu
5
shell: /bin/bash
6
memory: 256
Copied!
​

Virtual machine

Main property: virtualmachines:
Sub properties:
Property
Description
Type
Required
name
Name of the virtual machine. Visible to learners and becomes part of the short DNS hostname of the virtual machine.
string
Required
image
The Google Compute Engine image to use for this virtual macine. Instruqt needs permission to pull the image.
string
Required
machine_type
The machine type of the virtual machine. Overview of all supported machine types (up to 32 vCPUs and 28.8 GB memory)
string
Required
environment
A map of key-value pairs that will be injected as environment variables.
map
Optional
shell
Defaults to /bin/sh for maximum compatibility. Set this to /bin/bash for more features.
string
Optional
allow_external_ingress
Allow inbound traffic from external sources. Valid options: • http • https • high-ports This feature is documented on the networking page: usage instructions.
[]string
Optional
​

Example config.yml

YAML
1
version: "3"
2
virtualmachines:
3
- name: vm
4
image: debian-cloud/debian-9
5
machine_type: g1-small
Copied!
​

GCP project

Main property: gcp_projects:
Sub properties:
Property
Description
Type
Required
name
The name of the GCP project.
string
Required
services
Use this field to enable services on the Google Cloud project. For a list of available services, visit the API library page or run gcloud services list --available. 🚫You can not enable serviceusage.googleapis.com
list
Optional
​

Example config.yml

YAML
1
version: "3"
2
gcp_projects:
3
- name: gcptrack
4
services:
5
- compute.googleapis.com
6
- container.googleapis.com
Copied!
​

AWS account

Main property: aws_accounts:
Sub properties:
Property
Description
Type
Required
name
The name of the AWS account.
string
Required
iam_policy
The IAM policy document that will be attached to the account. This can be specified as either YAML or JSON.
string
Optional
managed_policies
A list of all managed policies that will be attached to the account. An overview of all policies can be found in the AWS Console (requires log in)​
list
Optional
scp_policy
The SCP policy document that will be attached to the account
string
Optional
​

Example config.yml

YAML
1
version: "3"
2
aws_accounts:
3
- name: aws-iam-track
4
iam_policy: |-
5
{
6
"Version": "2012-10-17",
7
"Statement": [
8
{
9
"Sid":"EC2DefaultAllow",
10
"Effect": "Allow",
11
"Action": "ec2:*",
12
"Resource": "*"
13
}
14
]
15
}
16
scp_policy: |-
17
{
18
"Version": "2012-10-17",
19
"Statement": [
20
{
21
"Sid": "RequireLessThanXLInstanceType",
22
"Effect": "Deny",
23
"Action": "ec2:RunInstances",
24
"Resource": "arn:aws:ec2:::instance/*",
25
"Condition": {
26
"StringNotEquals": {
27
"ec2:InstanceType": [
28
"t2.nano"
29
]
30
}
31
}
32
}
33
]
34
}
Copied!
​

Azure subscription

Main property: azure_subscriptions:
Sub properties:
Property
Description
Type
Required
name
The name of the Azure subscription.
string
Required
user_only
Only create an AAD user, without an Azure Subscription. Useful when you only need an AAD user, for instance when using Azure DevOps.
boolean
Optional
roles
A list of roles that will be attached to the account. You can use any built-in Azure IAM roles, such as Contributor or Owner. See https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles for details on the available roles.
list
Optional

​

Example config.yml

YAML
1
version: "3"
2
azure_subscriptions:
3
- name: azuresubscription
Copied!
How-to guides - Previous
Migrate from Katacoda
Next
Sandbox hosts
Last modified 28d ago
Copy link
Contents
What is a sandbox?
Sandbox resources
Appearance
Sandbox properties