- Docker has launched cloud sandboxes on 24 September, enabling agents to operate on Docker-managed compute even after the laptop lid is closed.
- Sandbox Kits have been introduced as standard OCI images, which package the agent, tools, and guardrails together.
- Docker has committed to submitting the Kits specification to the CNCF for vendor-neutral standardization.
- The cloud sandboxes allow agents to run for up to 24 hours per session, with billing based on compute time.
- New accounts receive $250 in free credit for a limited time, sufficient to run the default size for over a thousand hours.
- Kits are designed to standardize agent permissions and can be built using familiar tools, avoiding vendor lock-in.
Docker has taken its agent sandboxes off the laptop, allowing AI agents to run on isolated microVMs in the cloud, announced on September 24. This shift enables agents to perform long-running tasks without interruption, addressing limitations of traditional laptops that sleep or throttle when closed.13
The cloud Sandboxes operate with a single command: ``` $ sbx move my-project --to cloud ```, which captures the sandbox's filesystem for recreation in the cloud. However, it’s important to note that this is a filesystem snapshot, not a live migration, meaning ongoing tasks will not survive the transfer.4
Each microVM is equipped with its own kernel and Docker daemon, allowing agents to install packages and run commands without affecting the host system. Docker has also introduced Kits, prebuilt sandboxes for specific agents like Claude Code and Codex, which can be initiated with `sbx --cloud run codex`.6
Billing is structured per second of compute, with no charges while a sandbox is paused. Docker's Kits are built as standard OCI images, promoting interoperability and eliminating vendor lock-in. “Standards are what let an ecosystem move fast without fragmenting,” said a CNCF CTO, highlighting Docker's commitment to open specifications.2
Docker plans to submit its Kits specification to the Cloud Native Computing Foundation, aiming to enhance collaboration and governance in the cloud-native ecosystem.
“The move captures a filesystem snapshot, not a live migration, so mid-execution work doesn't survive the trip. New accounts get $250 in free credit, enough to run the default size for over a thousand hours.”
H2S Media
Help Net Security
