Radar / AI infrastructure / Docker Sandbox Kit
Docker Sandbox Kit: coding-agent sandboxes donated to the CNCF
Docker is taking its Sandbox Kit spec to the CNCF - a standard for packaging coding-agent sandboxes (and their authority/permissions) as portable OCI artifacts.
Why it matters
Turns agent sandboxes into movable cloud compute with a vendor-neutral spec: the same packaged environment and permission envelope runs anywhere OCI runs, instead of every agent platform inventing its own isolation format.
What you could build with it
Package agent sandboxes as Sandbox Kit OCI artifacts so the same locked-down environment runs identically on a laptop or in the cloud.
Does it hold up?
Real and shipping: Cloud Sandboxes launched with pay-as-you-go pricing ($0.07/hr), Nous Research demoed a third-party agent as a Kit onstage, and the Apache 2.0 spec is headed to CNCF — adoption is the open question, not viability.
Built with Docker Sandbox Kit
- Nous Research demoed Hermes as a first-class Kit onstage at WeAreDevelopersDocker · Docker's keynote writeup: a third-party agent (Hermes) packaged as a Kit running in Docker Sandboxes, plus CNCF CTO quote backing the open spec.
- Docker's MicroVM sandboxes: Cloud Sandboxes at $0.07/hrWebProNews · Coverage of Cloud Sandboxes (same microVM isolation local and cloud, 24h sessions) and the v3 Sandbox Kit spec shipping as ordinary OCI images.
- Docker commits to bringing the Sandbox Kit spec to the CNCFLinux.com · Explainer of the open spec: agent, tools, and a typed list of everything it may reach packed into one OCI image so permissions are portable and diffable.
Learn more
First spotted on engineering blog: source.
More AI infrastructure
Modular open-sources MAX inference server, Mojo stdlib and accelerator kernelsThe core of Modular's unified AI deployment stack is now open: the MAX inference server (OpenAI-compatible endpoints)…infra · JEV 0.76OmniRouteFree MIT AI gateway: one endpoint, 290+ providers and 500+ models with quota-aware auto-fallback.infra · JEV 0.75Cloudflare Agents Week: Sandboxes GA, 50K concurrent Workflows, Managed OAuth for agentsA dozen agent-infrastructure launches in one week: persistent Linux Sandboxes (GA) with real shell/filesystem/state…infra · JEV 0.69ai-memory: long-term memory for agent coding CLIsRust solution for long-term memory for agent coding CLIs, facilitating handoff between different agents and sessions.infra · JEV 0.68DeepSeek open-sources Ascend infrastructure stackDeepSeek published Ascend-optimized versions of its NVIDIA-proven infra components — TileLang Ascend, DeepGEMM-Ascend…infra · JEV 0.65Hindsight: agent memory that learnsAgent memory system built for learning over time: retain/recall/reflect operations with SOTA scores on the LongMemEval…infra · JEV 0.63
Get the week's best AI launches, plus 3 ideas worth building
One email every Saturday. Ranked by traction, not hype. Free.