Docker

docker run docker/hello-bluesky

Even going dark mode now requires a threat model. The latest issue of the Docker Security Dispatch from Captain Mohammad-Ali A’râbi covers Docker Sandbox Kits, zombie GitHub Actions, the policies behind Docker Hardened Images, & a malicious VS Code theme cluster. Read: https://bit.ly/3W315wU

There's a difference between permission systems and architectural guarantees. That distinction is what separates a contained failure from a production incident. This piece by mgks on what closing that gap requires, and what Docker committing the spec to the CNCF means: https://bit.ly/4jxV3xU

Docker Captain Kristiyan Velkov flew to the US for the first time to present at WeAreDevelopers & posted his takeaways. He explains what the microVM boundary in Docker Sandboxes really does, how credential injection works, & what it's like to see the Docker community at scale: https://bit.ly/4jBVO9e

The official BAND kit for Docker Sandboxes is here. One `sbx create` command connects an agent on the BAND platform to an isolated Docker Sandbox for local code, tool execution, and agent collaboration. Credentials never enter the sandbox: https://bit.ly/4z4HICd

Containers became the standard by solving a specific problem: making software portable and reproducible. Futurum frames the Kit Spec as a continuation of that, for agent authority. Full analysis: https://bit.ly/4echUM7

ActiveState is partnering with Docker to extend trust across more of the container stack, pairing Docker Hardened Images (DHI) with ActiveState’s trusted open-source components. https://bit.ly/4hZLmao

Securing agentic software factories is top of mind for dev teams. Agent Baseline participants recently published a reference architecture designed to do exactly that. Learn more: https://agentbaseline.org/reference-architecture

What does it take to build AI that can hold a real conversation? Seth Wright, AI product engineering leader at CTM, joins Per on Ship Happens to talk about building voice AI, measuring quality, and how the engineer’s job is changing. Watch the full episode: https://youtu.be/u1L4m5D9NCU

Agent security isn't a new problem. It's a familiar one, moving faster than most defenses were built for. Docker CISO Mark Lechner's take: the answer isn't more model guardrails. It's one isolated, verifiable boundary where agents do their work. Watch the full talk: https://youtu.be/yprhNWNkAnU

New to Docker? Start with Docker in Practice: Build, Debug, and Deploy Containers from Docker Captain Steve Buchanan, the first course in the new Docker Foundations Professional Certificate on LinkedIn Learning: https://bit.ly/4yOJjv3

The isolation question for AI agents is getting more specific. Not 'is it sandboxed?' but 'what exactly does the boundary hold, and what can get past it?' Sandbox Review on how to answer that, and what major coding agents are actually doing about isolation in production today: https://bit.ly/4ytvvWm

An agent that breaks something isn't broken. It's doing exactly what it was built to do, just not what you intended. Docker’s Eric Jia and Srini Sekaran on the five main agent security risks, why traditional app security wasn't built for them, & the incidents behind each one https://bit.ly/4ypbsZi

The 2026 Stack Overflow survey is out. We’re honored Docker remains the most used & desired cloud dev tool. It also shows trust is the biggest gap: just 7% of developers trust AI for important work decisions. Docker CMO Terri Avnaim on extending trust to sandboxes: https://bit.ly/4BaGWVE

Agents that can edit files and run commands can also game their own evals. Harbor + Docker Sandboxes fix that: every eval task runs in an isolated microVM, with network policies for fair, reproducible runs. https://bit.ly/4B8xf9Z

We’re happy to be partnering with Chainloop on their kit for Docker Sandboxes. 🤝 Docker secures where agents run. Chainloop governs what they ship. Learn more here and try the kit today: https://bit.ly/4dGNe5j

Don't babysit your agents. Put them in sandboxes. Each sandbox is a microVM with its own kernel. And now they run in the cloud, too. Ready to try it out? New signups get $250 in Cloud Sandboxes credit. Claim yours before the promotion ends on October 31: https://www.docker.com/c/sbx-promo/

Docker Skills are now on the Cursor Marketplace. 10+ official skills for Docker Sandboxes, Dockerfiles, Compose, and Docker Agent. Give your agents the context to run safely and build faster, without starting from scratch. /add-plugin docker-skills https://cursor.com/marketplace/docker

Two events, two cities, one very eventful week. Devoxx Belgium + World Summit AI Amsterdam: packed rooms, great questions, plenty of conversations around AI agents, security and governance - and yes,an AI agent on the loose at our booth. Thank you to everyone who made the week such a good one.

Agents are building software. Who's securing the factory? Agent Baseline participants publish a reference architecture for securing agentic software factories, with controls enforced by the environment, not the agent. Learn more in the white paper → https://bit.ly/4dxr05M

Sandbox Royale was one of the highlights at WeAreDevelopers. Day 1 winner: filed lawsuits against everyone. Day 2 winner: "warm, chaotic, with risk taking characteristics," teaming up with as many agents as possible. We love seeing the creativity that went into the strategies. Congrats Sam & Bita!

An AI advertising agent that can also use tools, built on a deterministic foundation with a probabilistic layer on top. Scott Gale, CTO of Fluency, on how they get the best of both without giving up compliance. On Ship Happens with Per Krogslund: https://youtu.be/_M2SrhUqRYs

"Docker is giving the industry an open, repeatable way to package an AI agent, its tools, and its guardrails as one artifact." Chris Aniszczyk, CNCF CTO. https://bit.ly/3Vvp6fK on why it matters that the format is open and governed by the CNCF. Read more: https://bit.ly/47IQbPa

Every agent has its own set of rails. If one updates, your security posture can change without your review. You need a layer below all of them. Join Docker's John Craft & Srini Sekaran on Oct 12 for a 30-min live webinar and demo on going below the harness. https://bit.ly/4hqkyjj

When teams run agents across multiple models and harnesses, relying on each one's own safety standards isn't a strategy. You need a governed runtime underneath all of them. Watch Tushar Jain's Mainstage talk at WeAreDevelopers for the full take. Now on-demand: https://bit.ly/4e1iIDb

The industry is continuing to pick up on the Cloud Sandboxes and Kits spec announcements and what they mean for the ecosystem. Techzine covered both, including why the CNCF commitment is getting attention. Read it here: https://bit.ly/3UeAagO

Your newest hire is shipping code at a pace your review teams can't keep up with. Learn how secure by default is your only way forward. Read more → https://bit.ly/4AQerMH

Writing code used to be the expensive part. Now it's the tokens. Per Krogslund with Scott Gale, CTO of Fluency, on when to let agents run and when to set up a deterministic process instead. Latest Ship Happens, full episode: https://youtu.be/_M2SrhUqRYs

Sandbox Kits are how you stop having the same "what did you install to get this working?" conversation. Reynald Adolphe on how one file defines your tools, config, and network rules, and travels with your project. Watch here: https://bit.ly/3UI6Xee

60% of orgs run AI agents in production. 40% say security is the biggest thing holding them back from scaling. That gap is the real story right now. Srini Sekaran and Eric Jia on what agents actually are, how they work, and why the environment matters as much as the model: https://bit.ly/4hsSFXU

Your laptop is the new prod. Govern it that way. Join Docker's Eli Aleyner & Srini Sekaran Oct 5, 9am PST for a live 30-min webinar and demo on governing agents across network, filesystem, and MCP. Register today: https://bit.ly/4hqkyjj

If you've been following the Docker Sandboxes conversation & want to go deeper, start with Low Level. Why the microVM boundary is the right tool for agents running unattended with real credentials, & what it looks like when an agent tries to reach something it shouldn't: https://bit.ly/3VHTqUk

If you were at WeAreDevelopers last week, this is your recap. If you weren't, this is what you missed. Two major announcements, a surprise keynote guest, and resources to go from reading about it to actually trying it. Full recap here: https://bit.ly/4z2KLu2

The Agentic AI Foundation (part of the Linux Foundation) published their take on the Docker Sandbox Kit Specification, now part of their ecosystem. What an agent can do, where it can reach, what it can touch: declared in one OCI image, open standard, vendor neutral. Read: https://bit.ly/4AJoRO3

“Don't trust a model to govern a model." Mark Cavage's keynote at WeAreDevelopers covered: - New Cloud Sandbox offering - Sandbox Kit Spec, a common foundation for the agent ecosystem - Surprise guest Hervé Bizira Trust comes from the system around the agent. Watch: https://bit.ly/47aYanY

WeAreDevelopers doesn't stop when the conference does. BAND is hosting a virtual hackathon with WeAreDevelopers, co-partnered by Docker, running through October 5. Open to everyone. Build something real. Full details here: https://bit.ly/4z9iAKb

Most people think isolation means limitation. This video shows what an agent can do when the boundary is set correctly and the right tools are in reach. Reynald Adolphe demos how to connect Claude inside a Docker Sandbox to Notion and GitHub via Docker's MCP Gateway: https://bit.ly/3TxKd05

Data centers in space sounds inevitable until you talk to someone who actually has to think about the physics. On Ship Happens: Justin Kuiper of Future Tech with Per Krogslund on the gap between the hype and what AI infrastructure in space actually requires: Full episode: https://bit.ly/46DTzdJ

WeAreDevelopers is a wrap and we're still buzzing from it! Thank you for the thoughtful conversations, and the energy you brought to each session, and to the Sandbox Royale arena. You are the reason we do this. Safe travels home! Share your favorite moments and pics below:

At WeAreDevelopers, Docker’s Mark Lechner highlighted how most orgs have no visibility into what their agents can reach. His take: manage manifests as code, only run agents in observable environments. Cloud Sandboxes keeps that boundary with your agent. New accounts get $250: docker.com/sbx-promo

Kelsey Hightower takes the Mainstage at WeAreDevelopers at 4:10pm PST. If anyone is going to say out loud what a lot of people are thinking about token spend, it's Kelsey. Can't be in the room? We're streaming it live on Docker YouTube: https://www.youtube.com/live/CDxdh5S9dUw

Tushar Jain just wrapped up on the mainstage at WeAreDevelopers. Great energy in the room. Per-harness guardrails aren't enough across multiple models. The layer that holds has to sit underneath all of them. This is the conversation the industry needs to be having. What's your take?

Today at WeAreDevelopers, Docker and the Linux Foundation are announcing a collaboration around the Docker Sandbox Kit Specification: an open standard for declaring what an agent may do, where it may reach, and what it may touch. Open source under Apache 2.0. Read more: https://bit.ly/3V9uHs0

Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute. Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo

Let's goooo! Day 1 at WeAreDevelopers starts this morning 🎉 Mark Cavage on the Mainstage at 9:45 AM - get there early - this will fill up fast. Can't make it? We're livestreaming it! Lightning talks, dev challenge and more (+ swag of course) at Booth #101. Livestream: https://bit.ly/47aYanY

Speed without trust isn't progress. Tomorrow, Docker's Mark Cavage takes the WeAreDevelopers main stage. Trust, agents, and the questions most teams haven't answered yet. It’ll be livestreamed, including some surprises. Subscribe & catch it live from anywhere: https://bit.ly/47aYanY

Meet the partners and customers bringing practical AI, security, and demo sessions to the Docker Pavilion at WeAreDevelopers. They will share pragmatic approaches to challenges, from giving agents useful memory to verifying the code they produce. Learn more https://bit.ly/3VuBH2B

The security model we've relied on for decades assumes the thing inside the boundary does what it's told. Justin Kuiper of Future Tech has operated where that failing has real consequences. He and Per Krogslund on governing agents when you can't get it wrong: https://bit.ly/46DTzdJ

Docker is proud to join the Blueprint Alliance, a cross-industry coalition advancing an open, multi-vendor architecture to secure and govern AI agents at enterprise scale. Learn more about the blueprint here → blueprintalliance.ai