Tutorials
Interactive terminal
Attach to a sandbox intentionally without making SSH the default control path.
Interactive terminals are useful for debugging, but they are not the default product control plane.
Use the existing console and guest RPC surfaces:
Recommended flow
Section titled “Recommended flow”mvmctl machine run --manifest ./mvm.toml --name debug-vm -dmvmctl machine console debug-vmmvmctl machine logs debug-vm -fSecurity notes
Section titled “Security notes”- Prefer vsock/control-plane operations over SSH.
- Keep debug instances separate from production policy.
- Tear down or cold-store state explicitly after debugging.
- Do not paste long-lived credentials into an interactive shell.