Docker AI agent sandboxes with HyperVisor isolation(docker.com)
docker.com
Docker AI agent sandboxes with HyperVisor isolation
https://www.docker.com/blog/docker-sandboxes-run-claude-code-and-other-coding-agents-unsupervised-but-safely/
2 comments
- Each agent runs in a dedicated microVM
- agents can build and run Docker containers inside the MicroVM
- no access to the host Docker daemon
- network isolation with allow and deny lists
- available for macOs and windows (linux support coming)
> no access to the host Docker daemon
I believe this is likely the only downside, but for good reasons!
I believe this is likely the only downside, but for good reasons!