<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Sandbox on Yatindra Rao</title>
    <link>https://raoyati.com/tags/sandbox/</link>
    <description>Recent content in Sandbox on Yatindra Rao</description>
    <language>en-us</language>
    <lastBuildDate>Tue, 14 Jul 2026 19:22:00 +0530</lastBuildDate>
    <atom:link href="https://raoyati.com/tags/sandbox/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Running a coding agent inside a sandbox</title>
      <link>https://raoyati.com/posts/2026/07/14/running-a-coding-agent-inside-a-sandbox/</link>
      <pubDate>Tue, 14 Jul 2026 19:22:00 +0530</pubDate>
      <guid>https://raoyati.com/posts/2026/07/14/running-a-coding-agent-inside-a-sandbox/</guid>
      <description>&lt;p&gt;I wanted to run a coding agent in a sandbox because if we are giving it full permission mode then it can be risky.&lt;/p&gt;
&lt;p&gt;I came across &lt;a href=&#34;https://docs.docker.com/ai/sandboxes/&#34; target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;Docker AI sandboxes&lt;/a&gt;
 which come with the built-in defaults needed to run coding agents.
They support &lt;a href=&#34;https://docs.docker.com/ai/sandboxes/agents/&#34; target=&#34;_blank&#34; rel=&#34;noopener noreferrer&#34;&gt;these coding agents&lt;/a&gt;
 out of the box.&lt;/p&gt;
&lt;p&gt;I ran the following commands to set this up on macOS.&lt;/p&gt;
&lt;div class=&#34;highlight&#34;&gt;&lt;pre tabindex=&#34;0&#34; class=&#34;chroma&#34;&gt;&lt;code class=&#34;language-bash&#34; data-lang=&#34;bash&#34;&gt;&lt;span class=&#34;line&#34;&gt;&lt;span class=&#34;cl&#34;&gt;brew trust docker/tap
&lt;/span&gt;&lt;/span&gt;&lt;span class=&#34;line&#34;&gt;&lt;span class=&#34;cl&#34;&gt;brew install docker/tap/sbx
&lt;/span&gt;&lt;/span&gt;&lt;span class=&#34;line&#34;&gt;&lt;span class=&#34;cl&#34;&gt;sbx login
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;p&gt;I needed to sign up with Docker, which I believe should be optional given these sandboxes are free to use even for commercial purposes. It&amp;rsquo;s a challenge in an enterprise setting, as we might need to get this approved before using it.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
