{"slug": "microvm-sandbox-on-win-mac-linux-with-policy-engine", "title": "MicroVM sandbox on Win, Mac, Linux, with policy engine", "summary": "Docker released a new sandboxing tool that runs AI coding agents in isolated microVM environments on Windows, Mac, and Linux, providing each sandbox with its own Docker daemon, filesystem, and network. The tool includes a policy engine for centralized management of network and filesystem policies, with the CLI free for commercial use and optional paid governance features.", "body_md": "# Docker Sandboxes\n\nDocker Sandboxes run AI coding agents in isolated microVM sandboxes. Each sandbox gets its own Docker daemon, filesystem, and network — the agent can build containers, install packages, and modify files without touching your host system.\n\nNoteThe\n\n`sbx`\n\nCLI is free to use, including for commercial work. Only[organization governance]requires a separate paid subscription.\n\nOrganization admins can\n[centrally manage sandbox network and filesystem policies](https://docs.docker.com/ai/sandboxes/governance/org/)\nfrom the Docker Admin Console, so the same rules apply uniformly across every\ndeveloper's machine. Available on a separate paid subscription.\n\n[Get started](#get-started)\n\nFor complete system requirements, see the\n[get started prerequisites](https://docs.docker.com/ai/sandboxes/get-started/#prerequisites).\n\nInstall the `sbx`\n\nCLI and sign in:\n\n``` bash\n$ brew trust docker/tap\n$ brew install docker/tap/sbx\n$ sbx login\n> winget install -h Docker.sbx\n> sbx login\nbash\n$ curl -fsSL https://get.docker.com | sudo REPO_ONLY=1 sh\n$ sudo apt-get install docker-sbx\n$ sudo usermod -aG kvm $USER\n$ newgrp kvm\n$ sbx login\n```\n\nThen launch an agent in a sandbox:\n\n``` bash\n$ cd ~/my-project\n$ sbx run claude\n```\n\nSee the [get started guide](https://docs.docker.com/ai/sandboxes/get-started/) for a full walkthrough, or jump to\nthe [usage guide](https://docs.docker.com/ai/sandboxes/usage/) for common patterns.\n\n[Learn more](#learn-more)\n\n[Agents](https://docs.docker.com/ai/sandboxes/agents/)— supported agents and per-agent configuration[Customize](https://docs.docker.com/ai/sandboxes/customize/)— reusable templates and declarative kits for extending or tailoring sandboxes[Architecture](https://docs.docker.com/ai/sandboxes/architecture/)— microVM isolation, workspace mounting, networking[Security](https://docs.docker.com/ai/sandboxes/security/)— isolation model, credential handling, and network policies[CLI reference](/reference/cli/sbx/)— full list of`sbx`\n\ncommands and options[Troubleshooting](https://docs.docker.com/ai/sandboxes/troubleshooting/)— common issues and fixes[FAQ](https://docs.docker.com/ai/sandboxes/faq/)— login requirements, telemetry, etc\n\n[Feedback](#feedback)\n\nYour feedback shapes what gets built next. If you run into a bug, hit a\nmissing feature, or have a suggestion, open an issue at\n[github.com/docker/sbx-releases/issues](https://github.com/docker/sbx-releases/issues).", "url": "https://wpnews.pro/news/microvm-sandbox-on-win-mac-linux-with-policy-engine", "canonical_source": "https://docs.docker.com/ai/sandboxes", "published_at": "2026-07-14 07:29:22+00:00", "updated_at": "2026-07-14 07:48:33.526164+00:00", "lang": "en", "topics": ["ai-agents", "ai-tools", "ai-safety", "developer-tools", "ai-infrastructure"], "entities": ["Docker"], "alternates": {"html": "https://wpnews.pro/news/microvm-sandbox-on-win-mac-linux-with-policy-engine", "markdown": "https://wpnews.pro/news/microvm-sandbox-on-win-mac-linux-with-policy-engine.md", "text": "https://wpnews.pro/news/microvm-sandbox-on-win-mac-linux-with-policy-engine.txt", "jsonld": "https://wpnews.pro/news/microvm-sandbox-on-win-mac-linux-with-policy-engine.jsonld"}}