Docker AI agent sandboxes with HyperVisor isolationdocker.com 5 pointspploug7 months ago2 commentsSaveHideCopy link On HNComments−pplougOP7mo- Each agent runs in a dedicated microVM - agents can build and run Docker containers inside the MicroVM - no access to the host Docker daemon - network isolation with allow and deny lists - available for macOs and windows (linux support coming)−brunoborges7mono access to the host Docker daemonI believe this is likely the only downside, but for good reasons!
Comments
- Each agent runs in a dedicated microVM - agents can build and run Docker containers inside the MicroVM - no access to the host Docker daemon - network isolation with allow and deny lists - available for macOs and windows (linux support coming)
I believe this is likely the only downside, but for good reasons!