[dead]
Why less workflow friction?
Customize the exact environment of your container from the ground up (harnesses, tools, base image, packages, mounts, etc) and enter with a single command.
Docker Sandboxes – Disposable, isolated sandboxes for AI agents
21–30 of 406 posts
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#22Requires login. Garbage.
I build a OSS lightweight, portable VM for those that don't want lock ins: https://github.com/smol-machines/smolvm
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#23I am not sure I understand, how is this different from a devcontainer or other similar techniques? On another topic, can't help but notice that "leading coding agents" somehow does not include Pi.
it's running a full VM so the agent can eg: run docker commands safely etc
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#24[dead]
There is a name collision on MacOS where MacOS also provides containers [1]
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#25TO me, that's the important distinction: sandboxing limits what the agent can do but it doesn't necessarily enforce that the agent must run inside the sandbox. You need a separate control layer to enforce that boundary.
You design the sandbox so the agent starts in that layer. The next thing you can do is to limit the network access, this is what I'm working on right now.
Or do you mean something else?
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#26I got excited for this not because this didn't exist before, but because Docker putting their weight on this would imply a broader adoption and better integration in the industry. I am sad that they are asking for a login here though, which doesn't make any sense to me.
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#27Like many people, I suspect, I used Claude to write my own agent sandbox that suits my needs very well. Investing my time in a propietary product has become a hard sell.
Were you following any patterns/standards/advice on what you needed to protect against? Anything you can point the rest of us to?
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#28[deleted]
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#29been using this for a while - works great! Has also had a lot of updates over the past year so worth checking out again if you tried it a while ago
Do the agents come preinstalled in the images? Or do they somehow use whatever I’ve installed locally? The former makes sense to me but then I’m wondering whether the sandbox images stay up to date with new releases of each image.
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#30I know some people want to run their agents when their computer is off, but I imagine a solution like this will be much more common than paying for a remote sandbox (i.e on fly.io or exe.dev), especially because it'll be free.
Though, they need to remove the login requirement.