Docker has launched Cloud Sandboxes, hosted execution environments designed for coding agents that need to run longer than a laptop stays awake. A developer can start work locally and move the complete filesystem to Docker’s infrastructure with one command, then bring it back later through the same command-line workflow.
Each sandbox runs in a hardware-isolated micro virtual machine. Docker says this supports persistent, parallel jobs such as running a dozen agents for many hours without keeping a personal computer connected. The cloud service extends Docker Sandboxes, which introduced the same isolation model for local agent execution earlier this year. Docker is also packaging preconfigured “kits” as standard OCI container images so teams can build and distribute them with familiar tools.
Isolation does not remove every risk. Useful agents usually need controlled access to package registries, model hubs, code repositories or internal services. Security practitioners noted that a contained agent can still attack an allowed service through that connection. Teams therefore need fine-grained permissions and network controls in addition to a microVM. The product solves continuity and scaling, but not the full problem of deciding exactly what an autonomous tool may touch.