• Docker Sandboxes: Run Claude Code and Other Coding Agents Unsupervised (but Safely) We introduced Docker Sandboxes in experimental preview a few months ago. • Today, we’re launching the next evolution with microVM isolation, available now for macOS and Windows. • We started Docker Sandboxes to answer the question: How do I run Claude Code or Gemini CLI safely? • Sandboxesprovide disposable, isolated environments purpose-built for coding agents. • Each agent runs in an isolated version of your development environment, so when it installs packages, modifies configurations, deletes files, or runs Docker containers, your host machine remains untouched. • This isolation lets you run agents likeClaude Code, Codex CLI,Copilot CLI, Gemini CLI, and Kirowith autonomy.
Article Summaries:
- Docker has released a new version of its experimental Docker Sandboxes, now powered by microVM isolation and available for macOS and Windows. The update lets coding agents such as Claude Code, Gemini CLI, Copilot CLI, Codex CLI, and Kiro run unattended in a disposable, hypervisor‑protected environment that mounts only the project workspace. Agents can install packages, modify files, and even build Docker containers inside the sandbox without accessing the host Docker daemon. The new release adds network allow/deny lists, faster sandbox reset, and enhanced security, while future plans include Linux support and expanded gateway options.
Sources: