Image catalog details
Every image variant, its runtimes, guest services and limits.
Any image works as a sandbox; nothing in lifecycle or readiness needs a guest
agent. The cua-sandbox computer interfaces (screen, mouse, shell,
files) and the Spaces primitives need
cua-spacesd on port 3211. Images without it are
reached through the services you declare. See
Choose an image.
Windows images do not include a Windows license. Bring your own license covering your use, including hosting and virtualization rights. A successful boot is not a licensing check.
The table is generated from the SDK source (cua-image canonical images) and recorded image facts.
| OS | Distribution / version / architecture | Desktop / window manager | Image kind / runtime | Registry image or source | Evidence / limits |
|---|---|---|---|---|---|
| Linux | Ubuntu 24.04, amd64 and arm64 | XFCE on Xvfb, HTML5 viewer on 3211 (/viewer/) | Container (Docker or Podman, gVisor when installed); kind="vm": the -disk containerDisk (QEMU) | ghcr.io/trycua/linux:24.04 | Image.linux() default. Built from libs/images/linux; ships cua-spacesd on 3211 (service env). The resolver pins the digest. |
| Linux | Omarchy 4.0.2-1 (Arch Linux-based), amd64 | Hyprland / Wayland | containerDisk | public.ecr.aws/k5j5w0x5/cua-omarchy-workspace@sha256:dd09f70f8cd35eca7871dff000538302baad63688a3008803f2238492802d743 | Deployment qualification recorded boot and readiness for server:8000 and mcp:3000 with cua-computer-server 0.3.46 (legacy guest agent) and embedded Driver 0.22.2; direct Driver qualification used 0.26.1. The cua-sandbox interfaces need cua-spacesd, which this artifact does not ship; use its declared services directly. |
| Linux | NixOS; release and architecture not recorded in the publication summary | StumpWM | Published candidate image | public.ecr.aws/k5j5w0x5/cua-nixos-stumpwm:git-ee87f38043c043831a8761016015d6ef5ae783d9 | Publication summary reports the legacy computer-server guest agent and Cua Driver included, guest tests and CI anonymous-pull checks passed. Component versions and service ports are not recorded there. Commit-named candidate tag, not a digest pin or latest; no built-in SDK mapping. |
| Linux | NixOS; release and architecture not recorded in the publication summary | Xfce / Xfwm4 | Published candidate image | public.ecr.aws/k5j5w0x5/cua-nixos-xfce:git-ee87f38043c043831a8761016015d6ef5ae783d9 | Publication summary reports the legacy computer-server guest agent and Cua Driver included, guest tests and CI anonymous-pull checks passed. Component versions and service ports are not recorded there. Commit-named candidate tag, not a digest pin or latest; no built-in SDK mapping. |
| Windows | Server 2022, amd64 | Native Windows desktop | VM from the -disk containerDisk (QEMU); EFI firmware | ghcr.io/trycua/windows:2022 | Image.windows() default. Ships cua-spacesd (a logon task in the desktop session) with input through the Windows cua-driver. |
| macOS | Tahoe 26 | Native macOS desktop | Local Lume VM | ghcr.io/trycua/macos:26 | Image.macos() default (full tier; tier="slim" for :26-slim). Compatible Apple silicon host required. Built from libs/images/macos; ships cua-spacesd at login on 3211 (service env), gated on cua-spacesd doctor --strict and the accessibility probe. The resolver pins the digest. |
| macOS | Sequoia 15 | Native macOS desktop | Local Lume VM | ghcr.io/trycua/macos:15 | Image.macos("15"). Compatible Apple silicon host required. Ships the legacy cua-computer-server guest agent, not cua-spacesd; reach it through services you declare. cua sb exec, cua sb screenshot and cua sb view (and sb.shell, sb.screen) reach it without cua-spacesd, over SSH and VNC. |
Tiers#
Canonical images come in tiers. The tag is <os-version>[-<tier>][-disk]:
- full (no suffix, the default for
Image.linux(),Image.macos(),Image.windows()andcua sb create <os>): the desktop plus dev tooling. - slim (
-slim): the minimum that passescua-spacesd doctor --strictwith every feature. CI and benchmarks use it. - xcode (
-xcode,-xcode-<X.Y>, macOS only): full plus one pinned Xcode, its iOS simulator runtime and the Metal toolchain.
Pick one with Image.linux(tier="slim") or cua sb create linux --tier slim.
A tier that is not published yet raises ImageNotPublished; pass its
reference to Image.from_registry to use it anyway. Immutable pins append
-<yyyymmdd>-<sha7>.
| Image | Tier | SDK | Status |
|---|---|---|---|
ghcr.io/trycua/linux:24.04 | full | Image.linux() | Published |
ghcr.io/trycua/linux:24.04-slim | slim | Image.linux(tier="slim") | Published |
ghcr.io/trycua/linux:24.04-docker-disk | docker | Image.linux(tier="docker") | Not published yet |
ghcr.io/trycua/windows:2022 | full | Image.windows() | Published |
ghcr.io/trycua/macos:26 | full | Image.macos() | Published |
ghcr.io/trycua/macos:26-slim | slim | Image.macos(tier="slim") | Published |
ghcr.io/trycua/macos:26-xcode | xcode | Image.macos(tier="xcode") | Not published yet |
What's installed#
What's installed lists the apps and tools
in each image tier, with the versions cua-spacesd doctor --strict measured.
Images in the app pickers#
Cua Spaces and the OpenKoalaBots samples offer these images when you create a
Space. The apps and this table read one file, libs/images/sandbox-images.json.
Each entry names its distribution (distro), so a new Space shows the right
OS icon and System while it is still being created.
Adapter benchmark images join the list once they are published.
| Image | Group | Name | Tier | Local | cua-spacesd | Browsers |
|---|---|---|---|---|---|---|
ghcr.io/trycua/linux:24.04 | Desktop images | Ubuntu 24.04 | full | Container (gVisor when installed) | Yes | Chromium, Firefox |
ghcr.io/trycua/linux:24.04-disk | Desktop images | Ubuntu 24.04 VM | full | QEMU VM | Yes | Chromium, Firefox |
ghcr.io/trycua/linux:24.04-slim | Desktop images | Ubuntu 24.04 slim | slim | Container (gVisor when installed) | Yes | Chromium |
ghcr.io/trycua/linux:24.04-slim-disk | Desktop images | Ubuntu 24.04 slim VM | slim | QEMU VM | Yes | Chromium |
ghcr.io/trycua/windows:2022 | Desktop images | Windows Server 2022 | full | QEMU VM | Yes | Edge |
ghcr.io/trycua/macos:26 | Desktop images | macOS Tahoe 26 | full | Lume VM (Apple silicon) | Yes | Safari, Google Chrome |
ghcr.io/trycua/macos:26-slim | Desktop images | macOS Tahoe 26 slim | slim | Lume VM (Apple silicon) | Yes | Safari, Google Chrome |
ghcr.io/trycua/macos:15 | Desktop images | macOS Sequoia 15 | - | Lume VM (Apple silicon) | No | Safari |
ghcr.io/trycua/omarchy:edge | Distribution images | Omarchy | - | QEMU VM | Yes | Chromium |
ghcr.io/trycua/omarchy:edge-disk | Distribution images | Omarchy disk | - | QEMU VM | Yes | Chromium |