I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…
Docker Sandboxes – Disposable, isolated sandboxes for AI agents
371–380 of 440 posts
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#372I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…
What is WHP?
https://learn.microsoft.com/en-us/virtualization/api/hypervi...
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#373I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…
I stopped using Docker on macOS because host file system performance was so slow, even with all of the caching hacks piled on top of it, that it made the whole thing effectively unusable for development.
Directionally the post shared sounds great, but it seems "too good to be true" that we'd have a performant microVM for macOS.
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#374Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#375Earlier quoted context omitted.
pyenv has been standard tooling for far longer than uv. depending on package manager supplied Python packages only makes sense if you’re running rhel or Debian or something and your application is packaged/deployed/the maintenance path uses dnf/apt. Otherwise you should always use a venv and use an out of package manager update mechanism. Like, in a broader sense, vendoring dependencies only makes sense if you’re shi…
This is not about python packages, this is about python itself.
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#376Earlier quoted context omitted.
Why’s it not on Linux? What are the difficulties with that platform?
Linux is available today (Ubuntu): github.com/docker/sbx-releases. Our webpage showing only brew and winget is on us. For the people upthread who asked about on customization: templates (like snapshotting a running sandbox) and kits (YAML applied at creation like install steps, files, network and credential rules, or define a new agent outright) are the supported path now. It's early but take a look here: https://doc…
Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#377Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#378Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#379Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents
#380I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…
I looked at the docs last week and didn't see anything about that.