Today we are introducing Vercel Managed Images (VMI), a set of versioned, open-source base images you can use as-is or extend. The source for every image lives in the public vercel/sandbox repository.
Managed images replace Sandbox runtimes, which are now deprecated. Starting with version 3 of the Sandbox SDK, new sandboxes default to
The universal image switches our default operating system from Amazon Linux to Ubuntu, a lighter and more widely used system across the industry.
Every managed image gets a nightly release. Rolling tags such as
Within each release, dependencies are pinned to specific versions wherever possible, so a given image version stays consistent.
If you need a fully immutable, reproducible environment, pin to an image digest (SHA). Digest-pinned images opt out of automatic updates.
Each managed image targets a different starting point:
Sandboxes can use an image from any repository in your project, a repository which has been shared with your team or any public repository.
Images are addressed by their full path,
Amazon Linux runtimes are not part of the managed image catalog, so teams that need AL2023 can stay on
Open an issue or a pull request to improve them, and read the Vercel Sandbox images documentation to get started.
Read more
Continue reading...
Managed images replace Sandbox runtimes, which are now deprecated. Starting with version 3 of the Sandbox SDK, new sandboxes default to
vercel/sandbox/universal:latest. It ships with Node.js, Python, common coding agents and standard utilities, so most users never build a custom image or install packages at boot.The universal image switches our default operating system from Amazon Linux to Ubuntu, a lighter and more widely used system across the industry.
Secure by default
Every managed image gets a nightly release. Rolling tags such as
latest and the major-version tags pick up operating system and dependency updates automatically, including security patches and new releases of Node.js, Python, and the preinstalled coding agents.Within each release, dependencies are pinned to specific versions wherever possible, so a given image version stays consistent.
If you need a fully immutable, reproducible environment, pin to an image digest (SHA). Digest-pinned images opt out of automatic updates.
Choose a managed image from the catalog
Each managed image targets a different starting point:
vercel/sandbox/universal:latestis the new default, a rolling release on Ubuntu 26.04 with Node.js 24, Python 3.14 withuv, theopencode,claude-code,codex, andpicoding agents, and utilities includinggit,vim,nano,tmux,ripgrep,jq, andfzf.
vercel/sandbox/node:22,node:24, andnode:26provide Node.js versions on Ubuntu 26.04.
vercel/sandbox/python:3.14provides Python on Ubuntu 26.04.
vercel/sandbox/ubuntu:latestprovides base Ubuntu 26.04 with no extra tooling.
vercel/sandbox/arch:latestprovides Arch Linux, regularly updated, with no Node.js or Python preinstalled. Its large package repository makes it useful for agents that install tools on the fly.
Reference an image and migrate from runtimes
Sandboxes can use an image from any repository in your project, a repository which has been shared with your team or any public repository.
Images are addressed by their full path,
team-slug/project/repo:tag, for example vercel/sandbox/universal:latest. The SDK types the image property so built-in images autocomplete while any string is still accepted. The previous runtime property is deprecated, not removed, so existing code keeps working.Amazon Linux runtimes are not part of the managed image catalog, so teams that need AL2023 can stay on
runtime. Managed images run as the default ubuntu or arch user with passwordless sudo, rather than the vercel-sandbox user.Open an issue or a pull request to improve them, and read the Vercel Sandbox images documentation to get started.
Read more
Continue reading...