Docker AI agent sandboxes with HyperVisor isolation(www.docker.com)
4 pointsby pploug4 hours ago1 comment
  • pploug4 hours ago
    - Each agent runs in a dedicated microVM - agents can build and run Docker containers inside the MicroVM - no access to the host Docker daemon - network isolation with allow and deny lists - available for macOs and windows (linux support coming)
    • brunoborges16 minutes ago
      > no access to the host Docker daemon

      I believe this is likely the only downside, but for good reasons!