Docker Sandboxes: microVM isolation for AI agents

On Sept 8, Testcontainers maintainer mdelapenya introduced Docker Sandboxes (sbx): not a generic sandbox but a microVM with a dedicated container runtime, a built-in secret manager and network/filesystem policies, designed to run AI agents safely while protecting the host. OpenClaw author steipete then discussed how it relates to OpenClaw's sandboxing; both sides agreed the two serve complementary roles.

Confirmed

Docker Sandboxes is a microVM with a dedicated container runtime, secret manager and network/filesystem policies (mdelapenya, m1/m4).
It supports YAML declarative configuration, egress management and secret replacement, fitting into agent architectures (mdelapenya, m4).
steipete clarified OpenClaw's philosophy: it primarily offers managed sandboxes for sessions, where Docker Sandbox is a great fit; OpenClaw ships its own network egress proxy for secret management (steipete, m2/m5).

Unconfirmed

steipete's initial question about the boundary — whether the sandbox is a tool OpenClaw uses to build software, or OpenClaw runs inside Docker Sandbox — was resolved as complementary roles, but concrete integration details remain undisclosed.

Why it matters

AI agents often run untrusted code and handle secrets; combining microVM isolation with an egress proxy offers an engineered path for secret safety and host protection.
Clarifying the boundary between Docker's official solution and projects like OpenClaw helps developers choose an appropriate layered sandbox architecture.

2026-09-08 ~ 2026-09-09 · 5 related posts

Primary sources

Docker Sandboxes: a microVM with secrets manager and network policies to contain rogue agents — mdelapenya · 2026-09-08 23:06 (UTC+08:00)
Docker Sandboxes isolate AI agents in microVMs with egress control and secret masking — mdelapenya · 2026-09-08 23:20 (UTC+08:00)
Openclaw's sandbox model clarified: managed session sandboxes pair well with Docker Sandbox — steipete · 2026-09-09 00:06 (UTC+08:00)

steipete questions what Docker Sandboxes adds over plain Docker for running openclaw — steipete · 2026-09-08
[source] Docker Sandboxes: a microVM with secrets manager and network policies to contain rogue agents — mdelapenya · 2026-09-08
[source] Openclaw's sandbox model clarified: managed session sandboxes pair well with Docker Sandbox — steipete · 2026-09-09
OpenClaw maintainer explains its sandbox design: egress proxy plus managed sessions — steipete · 2026-09-09

1 near-duplicate retellings: mdelapenya