Live data from Hacker News

Docker Sandboxes – Disposable, isolated sandboxes for AI agents

docker.com

371–380 of 440 posts

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#371

I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…

What is WHP?

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#372

I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…

What is WHP?

Windows Hypervisor Platform, to my understanding.

https://learn.microsoft.com/en-us/virtualization/api/hypervi...

https://www.qemu.org/docs/master/system/whpx.html

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#373

I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…

I'd like to see real numbers that compare Docker Desktop for macOS before microVMs to post-microVMs.

I stopped using Docker on macOS because host file system performance was so slow, even with all of the caching hacks piled on top of it, that it made the whole thing effectively unusable for development.

Directionally the post shared sounds great, but it seems "too good to be true" that we'd have a performant microVM for macOS.

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#375
post #341

Earlier quoted context omitted.

pyenv has been standard tooling for far longer than uv. depending on package manager supplied Python packages only makes sense if you’re running rhel or Debian or something and your application is packaged/deployed/the maintenance path uses dnf/apt. Otherwise you should always use a venv and use an out of package manager update mechanism. Like, in a broader sense, vendoring dependencies only makes sense if you’re shi…

This is not about python packages, this is about python itself.

That's what the GP means as well, you can use pyenv and uv to install multiple versions of Python and create envs with whichever version you want to use.

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#376

Earlier quoted context omitted.

Why’s it not on Linux? What are the difficulties with that platform?

Linux is available today (Ubuntu): github.com/docker/sbx-releases. Our webpage showing only brew and winget is on us. For the people upthread who asked about on customization: templates (like snapshotting a running sandbox) and kits (YAML applied at creation like install steps, files, network and credential rules, or define a new agent outright) are the supported path now. It's early but take a look here: https://doc…

Quick update: webpage reflects Linux support as well, thanks for the flag.

https://www.docker.com/products/docker-sandboxes/

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#377

Earlier quoted context omitted.

What is WHP?

Windows Hypervisor Platform, to my understanding. https://learn.microsoft.com/en-us/virtualization/api/hypervi... https://www.qemu.org/docs/master/system/whpx.html

Yes!

Re: Docker Sandboxes – Disposable, isolated sandboxes for AI agents

#380

I work at Docker. Lot of valid and useful feedback here that we're looking closely at. One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms. Explained a bit more here about the architecture and why those choices were made: https://www.dock…

What about inbound credential checking, for when agent A calls agent B?

I looked at the docs last week and didn't see anything about that.

Post reply on HN