---
title: "oz0-node sandbox"
description: "Harness sessions, and the jobs an outside event such as a webhook starts, run in sandbox tier 1 where the machine has it: bubblewrap on Linux, Seatbelt on macOS."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0-node/sandbox"
---
# oz0-node sandbox

> Harness sessions, and the jobs an outside event such as a webhook starts, run in sandbox tier 1 where the machine has it: bubblewrap on Linux, Seatbelt on macOS.

For: Operators and developers looking up a command.

Harness sessions, and the jobs an outside event such as a webhook starts, run in sandbox tier 1 where the machine has it: bubblewrap on Linux, Seatbelt on macOS. A sandboxed process writes only to its job's directories, cannot see the node's data directory or other jobs, and reaches the network only through the node's egress proxy, which allows the hosts its tenant, plugin and agent list.

Machines without it run tier 0, and jobs that need tier 1 go to other nodes.

## Usage

```bash
oz0-node sandbox [command]
```

## Subcommands

- [`check`](https://docs.oz0.ai/reference/cli/oz0-node/sandbox/check)
- [`setup`](https://docs.oz0.ai/reference/cli/oz0-node/sandbox/setup)

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --data-dir
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        ~/.local/share/orchestrator-zero-node
      </code>
    </td>
    
    <td>
      where the node keeps its identity, uv, Python, runtimes and state
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0-node` commands](https://docs.oz0.ai/reference/cli/oz0-node) and the [global flags](https://docs.oz0.ai/reference/cli/oz0-node#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.