Загрузка видео...

Не удалось загрузить видео

На главную

Today's sandbox protects the agent. Tomorrow's may need to protect the code it writes. Oleg Šelajev 🇪🇪🧊🐳 talks with Docker Sandboxes PM Eric Jia about where sandboxing is headed and what developers should be preparing for next.

Docker's profile picture

Docker

557,605 subscribers

12,161 просмотров • 3 месяцев назад •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

Комментарии: 2

Фото профиля Jason Fleagle
Jason Fleagle3 месяцев назад

@shelajev Protecting generated code means treating output as an untrusted artifact. Build it without ambient credentials, scan dependencies and secrets, run tests in a disposable environment, compare declared versus observed behavior, and require a signed acceptance step before merge.

Фото профиля RH Fardin
RH Fardin3 месяцев назад

@shelajev Protecting the agent isn't enough if its output can quietly poison the codebase. Sandboxing generated code will become table stakes.

Похожие видео

Most devs running coding agents in YOLO mode have no idea what the agent can actually reach. Eric Jia and Kevin Wittek demo getting started with Docker Sandboxes, credential injection, kits, containers vs sandboxes, and a brand new SSH feature:
0:46

Most devs running coding agents in YOLO mode have no idea what the agent can actually reach. Eric Jia and Kevin Wittek demo getting started with Docker Sandboxes, credential injection, kits, containers vs sandboxes, and a brand new SSH feature:

Docker

20,530 просмотров • 2 месяцев назад

Curious about Docker Sandboxes but not sure where to start? Reynald Adolphe walks through the complete setup using NanoClaw - covering Sandbox creation, Claude Code, secure credentials, and the isolation model behind safer agents. Watch →
0:40

Curious about Docker Sandboxes but not sure where to start? Reynald Adolphe walks through the complete setup using NanoClaw - covering Sandbox creation, Claude Code, secure credentials, and the isolation model behind safer agents. Watch →

Docker

12,631 просмотров • 3 месяцев назад

Your coding agent runs as you. It has your credentials, your filesystem, your network. Docker Sandboxes change that. The setup that works on one dev's machine should work on everyone's. Eric Jia and Kevin Wittek on how kits make that possible:
1:05

Your coding agent runs as you. It has your credentials, your filesystem, your network. Docker Sandboxes change that. The setup that works on one dev's machine should work on everyone's. Eric Jia and Kevin Wittek on how kits make that possible:

Docker

17,402 просмотров • 1 месяц назад

Docker is excited to partner with E2B, a platform for running AI-generated code in secure cloud sandboxes. Docker + E2B now gives AI agents access to real tools (GitHub, Perplexity, Browserbase) in secure sandboxes via the MCP Catalog.
2:38

Docker is excited to partner with E2B, a platform for running AI-generated code in secure cloud sandboxes. Docker + E2B now gives AI agents access to real tools (GitHub, Perplexity, Browserbase) in secure sandboxes via the MCP Catalog.

Docker

45,609 просмотров • 1 год назад

At WeAreDevelopers, Docker CISO Mark Lechner highlighted how most orgs have no visibility into what their agents can reach. His take: manage manifests as code, only run agents in observable environments. Cloud Sandboxes is the boundary that stays with your agent, even after you close your laptop. Try it yourself - for the next 3 days, new accounts get $250 in credit:
1:02

At WeAreDevelopers, Docker CISO Mark Lechner highlighted how most orgs have no visibility into what their agents can reach. His take: manage manifests as code, only run agents in observable environments. Cloud Sandboxes is the boundary that stays with your agent, even after you close your laptop. Try it yourself - for the next 3 days, new accounts get $250 in credit:

Docker

18,205 просмотров • 1 месяц назад

Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute. Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts:
1:04

Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute. Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts:

Docker

533,470 просмотров • 1 месяц назад

Don’t babysit your agents. Put them in sandboxes. Each sandbox is a microVM with its own kernel. And now they run in the cloud, too. Ready to try it out? New signups get $250 in Cloud Sandboxes credit. Claim yours before the promotion ends on October 31:
1:04

Don’t babysit your agents. Put them in sandboxes. Each sandbox is a microVM with its own kernel. And now they run in the cloud, too. Ready to try it out? New signups get $250 in Cloud Sandboxes credit. Claim yours before the promotion ends on October 31:

Docker

17,116 просмотров • 23 дней назад

Curious how NanoClaw + Docker Sandboxes actually work? This demo walks through setting up NanoClaw in a Docker Sandbox - connecting messaging accounts, configuring agent tools and access, and running agents inside an isolated MicroVM instead of on your machine. Watch the full demo and learn more →
1:06

Curious how NanoClaw + Docker Sandboxes actually work? This demo walks through setting up NanoClaw in a Docker Sandbox - connecting messaging accounts, configuring agent tools and access, and running agents inside an isolated MicroVM instead of on your machine. Watch the full demo and learn more →

Docker

14,711 просмотров • 7 месяцев назад

Docker Scout provides you just the right amount of info where and when you need it most. Get started with Scout:
0:33

Docker Scout provides you just the right amount of info where and when you need it most. Get started with Scout:

Docker

16,703 просмотров • 3 лет назад

Docker Sandboxes are everywhere right now. If you haven't tried them yet, Reynald Adolphe's latest covers what they are, why they matter, and how to spin one up, in just a few minutes. Plus: running multiple Sandboxes at once and side-by-side agent comparisons:
0:26

Docker Sandboxes are everywhere right now. If you haven't tried them yet, Reynald Adolphe's latest covers what they are, why they matter, and how to spin one up, in just a few minutes. Plus: running multiple Sandboxes at once and side-by-side agent comparisons:

Docker

16,920 просмотров • 2 месяцев назад

“Don't trust a model to govern a model." Mark Cavage's keynote at WeAreDevelopers covered: - New Cloud Sandbox offering - Sandbox Kit Spec, a common foundation for the agent ecosystem - Surprise guest Hervé Bizira from Nous Research Trust comes from the system around the agent. Watch:
0:52

“Don't trust a model to govern a model." Mark Cavage's keynote at WeAreDevelopers covered: - New Cloud Sandbox offering - Sandbox Kit Spec, a common foundation for the agent ecosystem - Surprise guest Hervé Bizira from Nous Research Trust comes from the system around the agent. Watch:

Docker

17,416 просмотров • 1 месяц назад

TanStack AI runs coding agents in a sandbox now 📦 Agents: Grok build, Claude Code, Codex, OpenCode, or any ACP agent Sandboxes: Cloudflare, Docker, Local, Daytona or Vercel sandboxes Fully configurable sandboxes with skills, mcps and more! 🚀
0:42

TanStack AI runs coding agents in a sandbox now 📦 Agents: Grok build, Claude Code, Codex, OpenCode, or any ACP agent Sandboxes: Cloudflare, Docker, Local, Daytona or Vercel sandboxes Fully configurable sandboxes with skills, mcps and more! 🚀

TANSTACK

44,051 просмотров • 4 месяцев назад

Everyone is debating how much autonomy to give agents. What that conversation often skips is where humans need to stay in the loop. Watch the full episode for all of our CISO panelists’ takes on what this looks like in practice →
1:05

Everyone is debating how much autonomy to give agents. What that conversation often skips is where humans need to stay in the loop. Watch the full episode for all of our CISO panelists’ takes on what this looks like in practice →

Docker

10,838 просмотров • 3 месяцев назад

Agent adoption is “kind of the wild west right now”. Everyone is using agents on their laptops in their own way, with access to company files and every connected system. Zach Lloyd (Warp) and the CISO panel on what agent security actually requires:
0:28

Agent adoption is “kind of the wild west right now”. Everyone is using agents on their laptops in their own way, with access to company files and every connected system. Zach Lloyd (Warp) and the CISO panel on what agent security actually requires:

Docker

11,128 просмотров • 2 месяцев назад

Docker images are being built 39x faster with the next-gen Docker Build! Join the limited early preview program to gain access today:
0:32

Docker images are being built 39x faster with the next-gen Docker Build! Join the limited early preview program to gain access today:

Docker

93,544 просмотров • 3 лет назад

New in Hermes Agent: a credential firewall for Docker sandboxes. Your real keys never enter the sandbox. It runs on stand-in tokens, and a local proxy swaps in the real keys at the network boundary. Tokens from a compromised sandbox are useless elsewhere. > hermes egress setup
0:27

New in Hermes Agent: a credential firewall for Docker sandboxes. Your real keys never enter the sandbox. It runs on stand-in tokens, and a local proxy swaps in the real keys at the network boundary. Tokens from a compromised sandbox are useless elsewhere. > hermes egress setup

Nous Research

311,512 просмотров • 3 месяцев назад

Sandbox Kits are how you stop having the same "what did you install to get this working?" conversation. Reynald Adolphe on how one file defines your tools, config, and network rules, and travels with your project. Watch here:
0:25

Sandbox Kits are how you stop having the same "what did you install to get this working?" conversation. Reynald Adolphe on how one file defines your tools, config, and network rules, and travels with your project. Watch here:

Docker

15,198 просмотров • 1 месяц назад

WeAreDevelopers is a wrap and we're still buzzing from it! Thank you for the thoughtful conversations, and the energy you brought to each session, and to the Sandbox Royale arena. You are the reason we do this. We hope you (and all your swag) have safe travels back home. Share your favorite WeAreDevelopers moments and pics below:
0:41

WeAreDevelopers is a wrap and we're still buzzing from it! Thank you for the thoughtful conversations, and the energy you brought to each session, and to the Sandbox Royale arena. You are the reason we do this. We hope you (and all your swag) have safe travels back home. Share your favorite WeAreDevelopers moments and pics below:

Docker

14,180 просмотров • 1 месяц назад

"A developer has morals. It's very difficult to argue that an agent does." Allie Howe & Ian Livingstone (Keycard) Eli Aleyner (Docker), and Ezra Tanzer (Snyk) on agent identity, delegation patterns and what real governance looks like when agents are delegating work to other agents: Watch the full panel:
0:42

"A developer has morals. It's very difficult to argue that an agent does." Allie Howe & Ian Livingstone (Keycard) Eli Aleyner (Docker), and Ezra Tanzer (Snyk) on agent identity, delegation patterns and what real governance looks like when agents are delegating work to other agents: Watch the full panel:

Docker

17,044 просмотров • 3 месяцев назад