More Hanselminutes with Scott Hanselman episodes

Run your AI Agent in a Sandbox, with Docker President Mark Cavage thumbnail

Run your AI Agent in a Sandbox, with Docker President Mark Cavage

Published 22 Jan 2026

Duration: 00:32:13

Docker introduces a sandbox feature using micro VMs to run coding agents securely and isolated from the host system.

Episode Description

Sandboxing is having a moment. As agents move from chat windows into terminals, repos, and production-adjacent workflows, the question is no longer Wh...

Overview

The podcast highlights Docker's new sandbox feature, which allows developers to run coding agents such as GitHub Copilot and Claude in a more secure and isolated environment than traditional Docker containers. This sandbox employs micro VMs to provide enhanced isolation while maintaining efficiency, enabling quick startup times and low memory usage. It limits the agents' access by restricting them to specific directories, preventing them from interacting with the host system, and blocking risky operations like accessing the Docker socket or modifying system files.

Despite these security measures, the podcast notes that the sandbox is not entirely risk-free; improper permissions can still lead to potential vulnerabilities. The main goal of the feature is to simplify security management and reduce setup complexity for developers, allowing them to use coding agents safely without affecting their local development environments. Future improvements include support for parallel container execution and the ability to reuse configurations, aiming to further enhance usability and security.

Recent Episodes of Hanselminutes with Scott Hanselman

30 Jul 2026 AI and the Software Supply Chain with Endor Lab's Varun Badhwar

"Software development faces growing security risks from AI-generated code, open-source dependencies, and citizen developers, demanding zero-trust environments, early security integration, and hybrid AI-driven defenses to combat rapid exploitation and supply chain threats."

18 Jun 2026 The space between the Commits with Zed and DeltaDB's Nathan Sobo

The text critiques the dominance of monocultures in tech tools like Chromium and Electron, highlights the limitations of web-based IDEs, introduces ZED as a native alternative, and presents Delta DB, a version control system that tracks granular development processes for real-time collaboration and privacy-focused code evolution.

11 Jun 2026 Braille Is Freedom with Bristol Braille's Ed Rogers

Braille's declining literacy, tactile advantages over screen readers for precision and numeracy, and modern open-source innovations like the Canute Console face ongoing challenges of cost, complex data access, and integration with digital tools, emphasizing the need for community-driven solutions to sustain tactile accessibility.

More Hanselminutes with Scott Hanselman episodes