Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Docker Sandboxes – Disposable, isolated sandboxes for AI agents

docker.com

Post reply on HN
Print view View original

31–40 of 440 posts

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#31

Post by embedding-shape »

zingar wrote: post #27
outof wrote: post #11

Like many people, I suspect, I used Claude to write my own agent sandbox that suits my needs very well. Investing my time in a propietary product has become a hard sell.

Were you following any patterns/standards/advice on what you needed to protect against? Anything you can point the rest of us to?

You want to prevent the agent/others from reaching your home directory and other things. As long as you don't mount/sync directories/files from/to the container, so no mounting like "-v $(pwd):/app", but instead copy in, then when done, copy out.

And of course, instead of doing the "copy in > copy out" process manually, get your local agent to write a bash script that does that for you, given what directory you're in, and you're basically G2G.

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#32

Post by hvb2 »

zingar wrote: post #27
outof wrote: post #11

Like many people, I suspect, I used Claude to write my own agent sandbox that suits my needs very well. Investing my time in a propietary product has become a hard sell.

Were you following any patterns/standards/advice on what you needed to protect against? Anything you can point the rest of us to?

What specifically are you looking for? If you start from the premise that it runs as you right now, then that's something you can easily improve upon.

Start by mounting just your repo and passing in the keys for the agent. Take it from there, it's like software engineering, you iterate.

When you run into issues you expand the tools in the container available to it.

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#35

Post by KolibriFly »

karakanb wrote: post #26

I got excited for this not because this didn't exist before, but because Docker putting their weight on this would imply a broader adoption and better integration in the industry. I am sad that they are asking for a login here though, which doesn't make any sense to me.

That's docker, man. Tomorrow they're gonna add limits on sandbox runs without a premium account too

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#37

Post by Grimburger »

> Each agent runs inside a dedicated microVM with your dev environment

What's a "microVM" and what's the security model here compared to using real virtual machines with actual constraints on breakouts?

Is it marketing fluff?

Incus/LXD has had VM's for a long time now.

    incus launch images:ubuntu/26.04 my-ubuntu-vm --vm
    incus exec my-ubuntu-vm -- bash

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#40

Post by frio »

Grimburger wrote: post #37

> Each agent runs inside a dedicated microVM with your dev environment What's a "microVM" and what's the security model here compared to using real virtual machines with actual constraints on breakouts? Is it marketing fluff? Incus/LXD has had VM's for a long time now. incus launch images:ubuntu/26.04 my-ubuntu-vm --vm incus exec my-ubuntu-vm -- bash

It’s real VMs, firecracker style.
Post reply on HN