1---2name: 2635-docker-sandboxes-isolation-8e8107c03description: Resource Evaluation: Docker Sandboxes & Sandbox Isolation Landscape4---5# Resource Evaluation: Docker Sandboxes & Sandbox Isolation Landscape67| Field | Value |8|-------|-------|9| **Resource** | Docker Sandboxes blog + [docs.docker.com/ai/sandboxes/](https://docs.docker.com/ai/sandboxes/) |10| **Type** | Product launch + official documentation |11| **Published** | 2026-01-30 |12| **Score** | **4/5** (High Value) |13| **Action** | Integrated — new guide file + reference.yaml + cross-references |1415---1617## Summary18191. **Docker Sandboxes** (Docker Desktop 4.58+) provide microVM-based isolation for AI coding agents, replacing the older container-based approach. Claude Code runs with `--dangerously-skip-permissions` inside the sandbox since the VM itself is the security boundary.202. **Network policies** offer allowlist/denylist modes with domain-level filtering, per-sandbox config, and built-in monitoring via `docker sandbox network log`. Private CIDR ranges blocked by default.213. **Custom templates** use standard Dockerfiles extending `docker/sandbox-templates:claude-code`. Base image includes Ubuntu, Node.js, Python 3, Go, Git, Docker CLI, GitHub CLI, ripgrep, jq.224. **The broader landscape** includes Fly.io Sprites (Firecracker microVMs, ~300ms checkpoint/restore), Cloudflare Sandbox SDK (container-based, Workers integration), E2B (open-source Firecracker, 150ms cold boot), and Vercel Sandboxes (GA 2026-01-30, Firecracker microVMs).235. **Gap in the guide**: No existing documentation on running Claude Code in isolated environments. The `--dangerously-skip-permissions` warning (ultimate-guide.md:3943) lacks a safe alternative path.2425## Gap Analysis2627| Topic | Before | After |28|-------|--------|-------|29| Safe autonomous execution | Warning only ("never use --dsp") | Documented pattern: sandbox + --dsp |30| Docker Sandboxes | Not mentioned | Full guide with commands, network, templates |31| Cloud sandbox alternatives | Not mentioned | 4 alternatives with comparison matrix |32| Isolation decision tree | Missing | Flowchart: local vs cloud vs serverless |33| Network policy configuration | Missing | Allowlist/denylist modes documented |34| Custom template creation | Missing | Dockerfile pattern documented |3536## Integration Decision3738**Score justification**: 4/5 (High Value) rather than 5/5 because:39- Docker Sandboxes are genuinely useful and fill a real gap (safe autonomy)40- Official Docker documentation is reliable (Tier 1 source)41- However, the feature is Docker Desktop-only (no standalone Docker Engine support)42- Linux support limited to legacy container mode (not microVM)43- MCP Gateway not yet supported inside sandboxes44- Cloud alternatives are supplementary context, not Claude Code-specific features4546**Action**: Create dedicated guide file (`guide/sandbox-isolation.md`) covering Docker Sandboxes as the primary solution with alternatives for cloud/CI scenarios.4748## Fact-Check4950| Claim | Verification | Status |51|-------|-------------|--------|52| Docker Sandboxes use microVMs, not containers | docs.docker.com/ai/sandboxes/ | Verified |53| Claude Code runs with --dsp inside sandbox | docs.docker.com/ai/sandboxes/claude-code/ | Verified |54| Supported agents: Claude Code, Codex, Gemini, cagent, Kiro | docs.docker.com/ai/sandboxes/ | Verified |55| Network allowlist/denylist modes | docs.docker.com/ai/sandboxes/network-policies/ | Verified |56| macOS + Windows only for microVM mode | docs.docker.com/ai/sandboxes/ | Verified |57| Fly.io Sprites use Firecracker microVMs | sprites.dev | Verified |58| E2B cold boot ~150ms | e2b.dev | Claimed by vendor |59| Vercel Sandboxes GA 2026-01-30 | vercel.com announcement | Verified |60| Cloudflare uses containers, not microVMs | developers.cloudflare.com/sandbox/ | Verified |6162## Integration Applied6364- `guide/sandbox-isolation.md` — New guide file (~10 min read)65- `machine-readable/reference.yaml` — 13 new sandbox_* index entries66- `guide/ultimate-guide.md:3943` — Cross-reference added after --dsp warning67- `guide/README.md` — Navigation entry added68- `docs/resource-evaluations/README.md` — Index entry added
tools-only