You might've seen recently that Docker released support for microVM sandboxes for agents. We just shipped an adapter for it directly in TanStack AI! Run your agents inside of Docker Sandboxes with TanStack AI today.

@Docker Thanks for teaching me that the docker sandbox is really just microvm. Have been diving a lot of rabbit holes lately with goal of adding microvm support. Now easier than originally thought.

@Docker @krisvelkov check this bad boy out

@Docker @Bonnet_Remi you might potentially like this. Maybe useful for us

@tannerlinsley @Docker Whoa nice

The microVM boundary matters most for the failure you cannot review in advance: an agent that writes something correct and destructive. Filesystem and process isolation is the easy half. What decides whether a sandbox is real is egress, what the agent can reach on your network and which credentials it inherits when it gets there. Does the adapter let you pin egress per sandbox, or is that left to the Docker side?

@Docker Let's go.

@Docker i felt like this is the usecase for docker sandbox basically what covered by @mehulmpt nice stuff

@Docker microVM 做 agent sandbox 比纯 container 合适多了：启动快、隔离硬，agent 生成代码跑在里面不用担心逃逸到宿主。TanStack 直接适配省了大家自己搓 runner 的时间 👍

@Docker oh, lord, I saw tanstack and microvm in the first frame, thought you were implementing something crazy again