Docker announced Docker Sandboxes on August 10: disposable, isolated sandboxes built for running AI agents rather than long-lived application containers. The pitch is one throwaway environment per agent run — the agent gets a real shell and filesystem, and whatever it does to them dies with the sandbox.
The launch landed hard on Hacker News: 423 points and 264 comments in nine hours, which says more about the state of agent security than about Docker's marketing. Anyone running a coding agent with tool access has improvised some version of this already, usually with hand-rolled containers or a VM they hope is disposable enough.
Details beyond the product page are thin at this stage — no pricing, limits or availability specifics have been laid out in the material published so far.
Sources: Docker, HN discussion