More Hanselminutes with Scott Hanselman episodes

Run your AI Agent in a Sandbox, with Docker President Mark Cavage thumbnail

Run your AI Agent in a Sandbox, with Docker President Mark Cavage

Published 22 Jan 2026

Duration: 00:32:13

Docker introduces a sandbox feature using micro VMs to run coding agents securely and isolated from the host system.

Episode Description

Sandboxing is having a moment. As agents move from chat windows into terminals, repos, and production-adjacent workflows, the question is no longer Wh...

Overview

The podcast highlights Docker's new sandbox feature, which allows developers to run coding agents such as GitHub Copilot and Claude in a more secure and isolated environment than traditional Docker containers. This sandbox employs micro VMs to provide enhanced isolation while maintaining efficiency, enabling quick startup times and low memory usage. It limits the agents' access by restricting them to specific directories, preventing them from interacting with the host system, and blocking risky operations like accessing the Docker socket or modifying system files.

Despite these security measures, the podcast notes that the sandbox is not entirely risk-free; improper permissions can still lead to potential vulnerabilities. The main goal of the feature is to simplify security management and reduce setup complexity for developers, allowing them to use coding agents safely without affecting their local development environments. Future improvements include support for parallel container execution and the ability to reuse configurations, aiming to further enhance usability and security.

Recent Episodes of Hanselminutes with Scott Hanselman

19 Mar 2026 Building the Internet with sendmail's Eric Allman

TextControl's platform-agnostic .NET applications with Docker/Kubernetes/Azure deployment and ASP.NET Core/Angular integrations for document workflows, alongside explorations of internet history, AI advancements, legacy protocols, and IoT/home automation projects.

12 Mar 2026 A cognition engine for science with Allen Stewart

TXTextControl's platform-agnostic .NET integration across Windows, Linux, and cloud environments, paired with AI-driven memory systems that boost scientific research efficiency, reduce token usage, and enable drug discovery and data analysis through cognitive engines balancing fast/slow thinking, dynamic memory storage, and knowledge-grounded outputs, while addressing challenges like token costs and hallucinations via lab-in-the-loop collaboration and future memory-driven problem-solving research.

5 Feb 2026 The AI Vampire with Gas Town's Steve Yegge

Concerns about AI's impact on software development and work culture are explored, highlighting risks of over-reliance, burnout, and loss of human connection.

More Hanselminutes with Scott Hanselman episodes