Docker 推出 Sandboxes，为 AI 代理提供一次性隔离沙箱
Docker 推出 Sandboxes：为 AI 代理提供一次性隔离沙箱
Docker Sandboxes
Docker 沙箱
Run AI agents safely in local sandboxes.
在本地沙箱中安全运行 AI 代理。
Disposable, isolated sandboxes for AI agents like Claude Code, Gemini CLI, Copilot CLI, Codex, OpenCode, and Kiro that need safe, unattended execution.
为需要安全、无人值守执行的 AI 代理（如 Claude Code、Gemini CLI、Copilot CLI、Codex、OpenCode 和 Kiro）提供一次性、隔离的沙箱。
macOS
macOS
$ brew trust docker/tap && brew install docker/tap/sbx
$ brew trust docker/tap && brew install docker/tap/sbx
Copy
复制
Windows
Windows
> winget install Docker.sbx
> winget install Docker.sbx
Copy
复制
Get started free
免费开始使用
Watch demo
观看演示
See it in action
查看实际效果
Sandboxes in action.
沙箱实际应用。
Watch an agent install packages, run Docker, modify configs, and execute unattended. Then dispose of the sandbox in one command.
观看代理安装软件包、运行 Docker、修改配置并无人值守执行。然后通过一条命令销毁沙箱。
sbx-demo ▶ Run Demo
sbx-demo ▶ 运行演示
Click “Run Demo” to start
点击“运行演示”开始
Get started
开始使用
Get started in seconds.
几秒钟内即可开始使用。
macOS
macOS
$ brew trust docker/tap && brew install docker/tap/sbx
$ brew trust docker/tap && brew install docker/tap/sbx
Copy
复制
Windows
Windows
> winget install Docker.sbx
> winget install Docker.sbx
Copy
复制
Read the docs
阅读文档
Why sandboxes
为什么使用沙箱
Give agents the autonomy they need to get work done, safely.
赋予代理完成工作所需的自主权，同时确保安全。
Agents do their best work when they have freedom. Sandboxes let them run fast without running wild, so speed and safety stop being a tradeoff.
代理在拥有自由时表现最佳。沙箱让它们快速运行而不失控，使速度与安全不再需要权衡。
Filesystem
文件系统
Network
网络
Credentials
凭据
Need to enforce these controls across your whole team?
需要在全团队范围内强制执行这些控制吗？
That’s Docker AI Governance
那就是 Docker AI 治理
Capabilities
功能
YOLO mode, safely.
YOLO 模式，安全无忧。
Each agent runs inside a dedicated microVM with your dev environment and only your project workspace mounted in. Agents can install packages, modify configs, and spin up their own Docker containers. Your host stays untouched. No manual review, no permission prompts, no supervision required.
每个代理都在专用的 microVM 中运行，其中挂载了你的开发环境和仅限你的项目工作区。代理可以安装软件包、修改配置，并启动自己的 Docker 容器。你的主机保持不受影响。无需手动审查、无需权限提示、无需监督。
Customizable Safe Execution
可定制的安全执行
Network and filesystem controls you define.
由你定义的网络和文件系统控制。
Enforceable org-wide with Docker AI Governance.
可通过 Docker AI 治理在全组织范围内强制执行。
MicroVM Isolation
MicroVM 隔离
Hard security boundary from the host.
与主机之间的硬性安全边界。
Fast to Spin Up, Easy to Tear Down
快速启动，轻松拆除
Disposable by default. Faster than VMs.
默认即用即弃。比虚拟机更快。
Agents Can Use Docker Too
代理也可以使用 Docker
Agents can spin up containers within Sandboxes.
代理可以在沙箱内启动容器。
Real Dev Environment
真实开发环境
Install packages, run services, work unattended.
安装软件包、运行服务、无人值守工作。
One Sandbox for All Your Coding Agents
一个沙箱，适用于所有编码代理
Claude Code, Gemini CLI, Copilot CLI, Codex, Kiro, OpenCode.
Claude Code、Gemini CLI、Copilot CLI、Codex、Kiro、OpenCode。
Default –dangerously-skip-permissions Use permissive modes with confidence. In fact, that’s the default.
默认使用 --dangerously-skip-permissions 模式，放心使用宽松模式。事实上，这是默认设置。
Works with leading coding agents
与主流编码代理兼容
Every team is about to have their own team of AI agents doing real work for them. The question is whether it can happen safely. NanoClaw was built on the principle that you don’t trust agents with security, you build walls around them. Docker has been ahead of the curve on exactly this. Docker Sandboxes is what that looks like at the infrastructure level, making it possible for organizations to get the full value from agents without compromising on security.
每个团队都将拥有自己的AI代理团队，为他们做实际工作。问题在于能否安全地实现。NanoClaw的构建原则是，你不信任代理的安全，而是围绕它们建立围墙。Docker在这方面一直走在前列。Docker Sandboxes正是基础设施层面的体现，使组织能够从代理中获得全部价值，同时不牺牲安全性。
Gavriel Cohen
Gavriel Cohen
Creator of NanoClaw, NanoClaw
NanoClaw创始人，NanoClaw
Docker Sandboxes let agents have the autonomy to do long-running tasks without compromising safety. We’re excited to integrate Sandboxes into Warp so that developers can run agents freely with a consistent environment, regardless of whether agents are running locally or in the cloud.
Docker Sandboxes让代理能够自主执行长期任务，同时不损害安全性。我们很高兴将Sandboxes集成到Warp中，以便开发人员可以在一致的环境中自由运行代理，无论代理是在本地还是云端运行。
Ben Navetta
Ben Navetta
Engineering Lead, Warp
Warp工程负责人
Give agents freedom. Keep what matters safe.
给代理自由。保护重要内容的安全。
macOS
macOS
$ brew trust docker/tap && brew install docker/tap/sbx
$ brew trust docker/tap && brew install docker/tap/sbx
Copy
复制
Windows
Windows
> winget install Docker.sbx
> winget install Docker.sbx
Copy
复制
Read the docs to get started
阅读文档开始使用
FAQ
常见问题
Common questions.
常见问题解答。
What is a sandbox for AI coding agents?
什么是AI编码代理的沙箱？
A sandbox is a microVM isolated environment that protects your filesystem and network from agents running inside it.
沙箱是一个microVM隔离环境，保护你的文件系统和网络免受在其中运行的代理的影响。
Which coding agents are supported?
支持哪些编码代理？
Out of the box we support Claude Code, Gemini CLI, Copilot CLI, Codex, OpenCode, Kiro. You can also create your own
开箱即用，我们支持Claude Code、Gemini CLI、Copilot CLI、Codex、OpenCode、Kiro。你也可以创建自己的。
What does “YOLO mode” mean, and is it safe?
“YOLO模式”是什么意思，安全吗？
YOLO mode (--dangerously-skip-permissions) gives agents autonomy with no approval prompts. Essential for speed, but risky without guardrails. Sandboxes make it safe by isolating each agent inside a dedicated microVM.
YOLO 模式（--dangerously-skip-permissions）赋予代理自主权，无需审批提示。这对速度至关重要，但如果没有防护措施则存在风险。沙箱通过将每个代理隔离在专用的微型虚拟机中，使其变得安全。
How is a sandbox different from a VM?
沙箱与虚拟机有何不同？
Sandboxes run fully isolated in microVMs, giving more isolation without paying the full cost of running a VM. This lets them do things that need more permissions safely, like running additional Docker containers.
沙箱在微型虚拟机中完全隔离运行，提供更强的隔离性，而无需承担运行虚拟机的全部成本。这使得它们能够安全地执行需要更多权限的操作，例如运行额外的 Docker 容器。
What safety controls can I configure?
我可以配置哪些安全控制？
To define these once and enforce them on every developer’s machine, see Docker AI Governance.
要一次性定义这些控制并在每位开发者的机器上强制执行，请参阅 Docker AI 治理。
Do I need Docker Desktop to use sandboxes?
使用沙箱是否需要 Docker Desktop？
No.
不需要。
What if I need additional admin controls?
如果我需要额外的管理员控制怎么办？
Installing Sandboxes covers core functionality. For centralized controls across a team such as network policies, filesystem rules, MCP governance: Docker AI Governance.
安装沙箱涵盖核心功能。如需团队范围内的集中控制，如网络策略、文件系统规则、MCP 治理，请使用 Docker AI 治理。
Need More Control Over Your Sandboxes?
需要对沙箱进行更多控制？
With Docker Sandboxes, your developers get isolated environments to run agents freely and safely. When your team needs to go further with network access restrictions, filesystem policies, and centralized admin controls, we can help you configure the right setup.
借助 Docker 沙箱，您的开发人员可以获得隔离的环境，自由安全地运行代理。当您的团队需要进一步实施网络访问限制、文件系统策略和集中管理控制时，我们可以帮助您配置合适的设置。
Docker AI Governance adds network access policies, filesystem controls, and org-wide MCP governance: defined once, enforced everywhere.
Docker AI 治理增加了网络访问策略、文件系统控制和组织范围的 MCP 治理：一次定义，处处执行。
Talk to us about:
与我们讨论：
- Network access policies for sandbox environments
- Filesystem access controls and restrictions
- Admin-level configuration for your team
- 沙箱环境的网络访问策略
- 文件系统访问控制和限制
- 团队的管理员级配置
Talk to an expert
与专家交流
Thank you for your interest. The Docker Team will be in touch
感谢您的关注。Docker 团队将尽快与您联系。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力