New #sbx kit: Mini Me Editor. It bundles the Mini Me agent and the #Eclipse #Theia web IDE in a single @docker.com sandbox, so I get a fully isolated dev environment in my browser. A bit like GitPod 🍊, but on my machine 🤗

mini-me.org/p/20261013-m...

#sbx #LocalModels

The Mini Me #sbx kit is now on @docker.com Hub. One command, a sandboxed Mini Me agent — no local Dockerfile to build.

sbx run --name mm-demo-hub docker.io/k33g/mini-me-kit:0.0.2

You can stack extra kits too (Go, Rust toolchains, ...).

mini-me.org/p/20261013-m...

Running an AI agent directly on your machine? It sees your configs, ssh keys, env variables, secrets...

So Mini Me now has its @docker.com sbx kit: two files and one command to run it in a sandbox. You'll see, it's quick.
mini-me.org/p/20261010-m...
#sbx #LocalModels

Same #Zed + @docker.com Agent + ACP + #llmman setup as before, but now the agent runs inside a Docker sandbox (sbx), not on my machine. Same local experience, shell access boxed in, secrets stay out of reach.

k33g.org/p/20261004-a...

#DockerAgent #sbx #Security

Put a coding agent in a microVM and you usually lose your editor and your harness. Not with a @docker.com Sandbox: it answers as an SSH host, so VS Code, Cursor and @t3.gg's T3Code connect unchanged.

Post 3 of Understanding Docker Sandboxes: mdelapenya.xyz/posts/2026-0...

#sbx #codingAgents

A Dockerfile says everything about the inside of an image and nothing about what it may reach. For an agent, that second half is the whole problem.

Docker Sandboxes Kits put the answer in the image itself, as one typed list. Post 2 of my #sbx series:

mdelapenya.xyz/posts/2026-0...

You have to be right every time. Agents only need to be right once. So "please be careful" is not a control. The boundary has to be somewhere the agent can't reach.

My ContainerDays talk on @docker.com Sandboxes, as a post (drawings by @shelajev.bsky.social ):

mdelapenya.xyz/posts/2026-0...

#sbx