← Back to events
ActiveTech

From Dockerfile to Kit: the Docker Sandboxes Kit Specification

What happened

Agents need containment, and a sandbox is only half of it. Something still has to say which agent runs there, what it gets, and what it may touch. That is a Kit: an ordinary OCI image, so the answer travels with the agent and means the same thing on any conforming runtime. Today we published the Docker Sandbox Kit Specification v3, open source under Apache 2.0 at docker/sandbox-kit-spec . Here is why I wrote it. Eve…

Summary assembled by rule from the sources below

Why it's spreading

Sources