Docker Sandboxes for AI
summary
Docker Sandboxes launches a near-instant microVM + container per agent so autonomous coding tools run builds and tests without host access; it uses secure bind mounts that stream project changes bidirectionally, a configurable network firewall, and a proxy that injects API tokens so secrets never enter the sandbox. It supports Docker-in-Docker workloads but does not yet expose the full Moby API. Installable via Brew/Winget or distro packages, sources in spx-releases.
AI-written summary · about
chapters (7)
- 0:00Welcome and introduction
- 0:50What are Docker Sandboxes
- 3:18Security and network isolation
- 5:06VM-based sandbox architecture
- 6:55Docker Sandboxes vs Docker
- 9:01AI agents and human oversight
- 10:29How to try Docker Sandboxes
related talks
26mrm -rf: Horror Stories From Unsandboxed AI Agents (and How Docker Fixes This)
25mPlease Sandbox your AI Agents
29mSandbox for Agentic Application With Cloud Native Stack
24mContained Intelligence: Secure Sandboxing for Gen AI Code
29mThe Revenge of VMs: Sandboxing with NerdBox
34mZero Secrets: Building Secure Infrastructure for AI Agents
40mArrakis: How To Build An AI Sandbox From Scratch
34mYOLO Developer Workflows with a Coding Agent in a Box