CLI reference / sandbox / fleet

stado sandbox fleet

Invocation

stado sandbox fleet <COMMAND>

Purpose

Operate fleet-owned gVisor sandboxes on registered Linux bare-metal hosts

Required inputs and options

This command has no command-specific inputs or options.

Output and state effect

This command group selects one of the subcommands listed below; use its exact child invocation to perform an operation.

Refusals

  • Before dispatch, Stado refuses a missing required token shown in the invocation, an unknown option, or a value outside a listed value set; argument-usage failures exit with code 2.

Subcommands

  • inventory — Read Docker, gVisor and cgroup prerequisites without changing the host
  • list — Read managed sandboxes, never unrelated containers
  • create — Create a sandbox with caller-declared enforced resource limits
  • update — Change CPU, RAM and process ceilings and read back the enforced values
  • show — Read observed state, security settings and resource limits
  • exec — Execute inside the sandbox, optionally detached with retained output
  • logs — Read a detached execution's persisted output and completion status
  • stop — Stop execution while preserving the private workspace
  • resume — Resume the same sandbox, limits and workspace
  • delete — Delete the managed sandbox and private workspace, confirming absence