Your Durable Object grew a Linux userland

What it does

Cloudflare Computer is a virtual filesystem backed by SQLite inside a Durable Object, with pluggable execution backends that let code run against it. A single workspace.runtime.exec() call can dispatch to a container, a bash shell, or a JavaScript isolate depending on what the caller needs. The filesystem state is authoritative and shared across all backends, so an agent can write a file in one runtime and read it in another without sync gymnastics.

The interesting bit

The container backend projects the SQLite state into a real sandbox container via a FUSE mount and a computerd daemon, giving you an actual Linux userland with real binaries and network access—while the isolate backends skip the container entirely and talk directly to the Durable Object over Workers RPC. It is essentially three different ways to give an agent a persistent computer, all sharing the same disk.

Key highlights

• Filesystem lives in a Durable Object’s SQLite database; backends connect lazily on first use
• Container backend mounts the workspace via FUSE with a computerd daemon over capnweb RPC
• Shell backend runs just-bash in a Dynamic Worker with no secondary store or sync round trip
• JavaScript backend evaluates ECMAScript modules with Workspace-backed node:fs/promises and durable relative imports
• Includes prebuilt computerd binary and examples ranging from chat agents to PDF generation pipelines

Caveats

• Explicitly marked preview only with unstable APIs that are subject to change; not for production use
• The design docs under docs/ describe forward-looking intent, not necessarily what the code does today

Verdict

Worth exploring if you are building AI agents on Cloudflare’s stack and need a persistent, scriptable workspace that can scale from a lightweight bash snippet to a full container. Skip it if you need production stability today or do not work within the Workers ecosystem.