Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 0 additions & 5 deletions content/manuals/ai/sandboxes/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,13 +6,8 @@ weight: 10
params:
sidebar:
group: AI and agents
badge:
Comment thread
craig-osterhout marked this conversation as resolved.
color: blue
text: Early Access
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Docker Sandboxes run AI coding agents in isolated microVM sandboxes. Each
sandbox gets its own Docker daemon, filesystem, and network — the agent can
build containers, install packages, and modify files without touching your host
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ description: AI coding agents supported by Docker Sandboxes.
keywords: docker sandboxes, ai agents, claude code, codex, cursor, gemini
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Docker Sandboxes runs the following agents out of the box:

- [Claude Code](claude-code/)
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/claude-code.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, claude code, anthropic, ai agent, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Official documentation: [Claude Code](https://code.claude.com/docs)

## Quick start
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/codex.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, codex, openai, ai agent, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of Codex in a
sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/copilot.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, github copilot, ai agent, github token, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of GitHub Copilot
in a sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/cursor.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, cursor, cursor agent, ai agent, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of Cursor in a
sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/docker-agent.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, docker agent, openai, anthropic, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Official documentation: [Docker Agent](https://docs.docker.com/ai/docker-agent/)

## Quick start
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/droid.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ description: |
keywords: docker sandboxes, droid, factory, ai agent, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of Droid, an AI
coding agent by Factory, in a sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/gemini.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, gemini, google, ai agent, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of Google Gemini in
a sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/kiro.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, kiro, ai agent, authentication, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of Kiro in a
sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/opencode.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, opencode, ai agent, authentication, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This guide covers authentication, configuration, and usage of OpenCode in a
sandboxed environment.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/agents/shell.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: Run an agent-less sandbox with a Bash login shell for manual setup,
keywords: sandboxes, sbx, shell, agent, manual setup, testing
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

`sbx run shell` drops you into a Bash login shell inside a sandbox with no
pre-installed agent binary. It's useful for installing and configuring
agents manually, testing custom implementations, or inspecting a running
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/architecture.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: Technical architecture of Docker Sandboxes; workspace mounting, sto
keywords: docker sandboxes, architecture, microVM, workspace mounting, sandbox lifecycle
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This page explains how Docker Sandboxes work under the hood. For the security
properties of the architecture, see [Sandbox isolation](security/isolation.md).

Expand Down
5 changes: 5 additions & 0 deletions content/manuals/ai/sandboxes/customize/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,11 @@ keywords: sandboxes, sbx, customize, templates, kits, mixins, custom agents
weight: 35
aliases:
- /ai/sandboxes/agents/custom-environments/
params:
sidebar:
badge:
Comment thread
craig-osterhout marked this conversation as resolved.
color: blue
text: Early Access
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: Frequently asked questions about Docker Sandboxes.
keywords: docker sandboxes, sbx, faq, sign in, telemetry
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

## Why do I need to sign in?

Docker Sandboxes is built around the idea that you and your agents are a team.
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/get-started.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ description: Install the sbx CLI, configure credentials, and work through your f
keywords: sandbox, sbx, get started, install, credentials, branch mode, network policy
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Docker Sandboxes run AI coding agents in isolated microVM sandboxes. Each
sandbox gets its own Docker daemon, filesystem, and network — the agent can
build containers, install packages, and modify files without touching your host
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ description: Trust boundaries, isolation layers, and security properties of Dock
keywords: docker sandboxes, security model, isolation, trust boundaries, microVM
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Docker Sandboxes run AI agents in microVMs so they can execute code, install
packages, and use tools without accessing your host system. Multiple isolation
layers protect your host system.
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/credentials.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: How Docker Sandboxes handle API keys and authentication credentials
keywords: docker sandboxes, credentials, api keys, authentication, proxy, ssh agent, secrets
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Most agents need an API key for their model provider. An HTTP/HTTPS proxy on
your host intercepts outbound requests from the sandbox, looks up the matching
credential on the host, and overwrites the auth header before forwarding. The
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/defaults.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ description: What a sandbox permits and blocks before you change any settings.
keywords: docker sandboxes, security defaults, network policy, credentials, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

A sandbox created with `sbx run` and no additional flags has the following
security posture.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/governance.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,6 @@ description: Centrally manage sandbox network and filesystem policies for your o
keywords: docker sandboxes, governance, organization policy, AI governance, admin console, network access, filesystem access
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

This page covers how to configure organization policies in the Docker Admin
Console under AI governance settings. For local sandbox policies that
individual users configure on their own machine, see [Policies](policy.md).
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/isolation.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: How Docker Sandboxes isolate AI agents using hypervisor, network, D
keywords: docker sandboxes, isolation, hypervisor, network, credentials
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

AI coding agents need to execute code, install packages, and run tools on
your behalf. Docker Sandboxes run each agent in its own microVM with four
isolation layers: hypervisor, network, Docker Engine, and credential proxy.
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/policy.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: Configure network access rules for sandboxes.
keywords: docker sandboxes, policies, network access, allow rules, deny rules
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Sandboxes are [network-isolated](isolation.md) from your host and from each
other. A policy system controls what a sandbox can access over the network.

Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/security/workspace.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,8 +7,6 @@ description: |
keywords: docker sandboxes, workspace trust, file access, review, sbx
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

Agents running in sandboxes have full access to the workspace directory without
prompting. With the default direct mount, changes the agent makes appear on
your host immediately. Treat sandbox-modified workspace files the same way
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/troubleshooting.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: Resolve common issues when using Docker Sandboxes.
keywords: docker sandboxes, sbx, troubleshooting, diagnostics, reset, network policy, git, ssh
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

## Run diagnostics

Before digging into a specific issue, run
Expand Down
2 changes: 0 additions & 2 deletions content/manuals/ai/sandboxes/usage.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,6 @@ description: Common patterns for working with sandboxes.
keywords: docker sandboxes, sbx, usage, run, policy, secrets, branches, git, workspaces, ssh
---

{{< summary-bar feature_name="Docker Sandboxes sbx" >}}

## Working with sandboxes

The basic workflow is [`run`](/reference/cli/sbx/run/) to start,
Expand Down