Sandbox Map for Claude Code and Codex Agents: From Docker SBX to E2B
minchoi · x · 2026-09-15
If you run Claude Code or Codex with auto-approve, your agent can rm, curl, and leak keys. A practical sandbox map: local microVMs include Docker Sandboxes (sbx run claude), shuru (ephemeral, offline by default), Brood Box (microVM + diff review), and open-source Brig with curated agent profiles. Cloud options: E2B (Firecracker, SDK-first, most used in products), Daytona (persistent workspaces), Vercel Sandbox / Modal for hosted execution. Plain Docker and DevContainers share the kernel—fine for deps, not a blast-radius wall. Laptop agents → Docker SBX / shuru / Brig; product features → E2B.
More from coding & agent
- HappyRobot CEO on what it takes for an SE to become an FDE at his $1.2B startup — ivory_tang · 2026-09-16
- Andrew Ng: Prompting dies in 6 months, replaced by loops and graphs — Roger_M_Taylor · 2026-09-15
- Same Test: 0 of 21 Runs Produced a T-Shirt Design I Would Wear — hazelcough · 2026-09-15
- Test: 7 Models Building a T-Shirt Shop Prefer Stale Training-Data APIs Over Latest Docs — hazelcough · 2026-09-15
- Stripe Engineer's New Substack: Can Models Build Fully Functioning T-Shirt Shops? Sort Of — hazelcough · 2026-09-15
- Steve Yegge on overnight coding agents: bespoke harnesses will kill reusable frameworks — tylerjdunn · 2026-09-15