It is 2026, and it is common to run AI agents in a terminal or an integrated development environment for coding tasks.

The problem is, AI agents can be insecure to run directly on your machine: only in Summer 2026 were several incidents reported. 1 I have recently experienced a strange situation myself when Antigravity , an AI agent from Google, has asked me if it was allowed to run tests from the Tests/ directory one level above the current working directory , because it has looked there for unknown reason. Of course, many software packages look for different things on the file system, for example, for a C compiler, etc. However, they usually check some predefined system locations like /usr/bin on Linux.

So, after that had happened, I have started to think about running AI agents strictly in virtual machines instead of directly. It turned out that Docker Inc. has a special solution for this: Docker Sandboxes . These are isolated virtual machines that also run Docker containers inside of them.…