Docker Sandboxes
ActifDocker's microVM sandboxes for running AI coding agents isolated from your host
Docker Sandboxes is a free way to let coding agents such as Claude Code, Codex or Gemini run with full sudo inside a microVM with its own kernel, Docker Engine, deny-by-default networking and proxy-injected credentials. Conditional on patching and mount discipline: releases from 0.28.0 until the 0.42.0 fix carry a critical macOS host-file escape, and the default mount is read-write, so the agent edits your working tree in place. Right for developers running agents unattended.
Isolation runtime that hosts third-party coding agents in microVMs; it runs no model itself.
Est-ce fait pour vous ?
Recommandé pour
- Giving an agent full sudo and its own Docker Engine without exposing the host kernel
- Keeping API keys out of the agent: the host proxy injects auth headers and raw credentials never enter the VM
- Reviewing agent work before it touches your tree: `--clone` mounts the repo read-only and the agent works on a private clone
- Running many agents one way: eleven are supported, including Claude Code, Codex, Copilot, Cursor, Devin, Gemini and OpenCode
Déconseillé pour
- Unpatched installs: versions 0.28.0 to before 0.42.0 on macOS let guest code read or modify arbitrary host files
- Protecting the working tree under the default mount: changes to Git hooks and build scripts reach the host immediately
- Isolating local MCP servers, which run on the host with host permissions
- Intel Macs, Windows 10 or Windows on Arm, or Ubuntu before 24.04: it needs Apple silicon on macOS 14+, Windows 11 on a 64-bit Intel or AMD processor, or Ubuntu 24.04+ with KVM
Notre expérience
Tarifs
Freemium- Free, including for commercial work
- Docker account sign-in required
- Run on Docker-managed cloud infrastructure
- Model-provider charges are separate
- Rate not read on the overview page
- Centralized network, filesystem and MCP policies
- Separate paid subscription
Aucun changement de verdict pour l’instant
L’horloge tourne dès le premier jour : les changements apparaîtront ici à mesure que notre verdict évolue.
Sources
- Docker security announcements (CVE-2026-77179 and CVE-2026-79994)oct. 2026
- Docker Docs: Docker Sandboxes overviewoct. 2026
- Docker Docs: Docker Sandboxes security modeloct. 2026
- Docker Docs: Install Docker Sandboxesoct. 2026
- Docker Docs: Docker Sandboxes supported agentsoct. 2026
- Docker Docs: Docker Sandboxes get startedoct. 2026
- Docker Sandboxes release notes (v0.48.0 on 2026-10-13)oct. 2026
- The Hacker News: Critical Docker Sandboxes flaw (Sep 17, 2026)oct. 2026
Journal de vérification
- Profil· Aucun changement
Agent automatisé
- Statut· Aucun changement
Agent automatisé
- Tarifs· Mis à jour
Agent automatisé
Overview page now states cloud sandboxes use a pay-as-you-go subscription with model-provider charges separate; added a Cloud sandboxes tier (rate not published on the page). sbx CLI and local compute free including commercial use, and org governance on a separate paid subscription, unchanged.
Vous le voulez en marche dans votre entreprise ?
Nous avons testé cet outil et nous construisons avec des outils comme lui chaque jour. Dites-nous le flux de travail : nous l’installons, nous l’intégrons et nous vous le livrons fonctionnel.
La conversation tourne sur Gnosari, l’un des outils de ce répertoire. Une vraie conversation, pas un script de vente.