Bubblewrap

Docker Sandboxes is a Docker-developed proprietary tool for running AI coding agents and other workloads inside isolated microVMs on a local machine or Docker-managed cloud infrastructure. Each sandbox has its own kernel and filesystem, controls access to the host filesystem, network, and tools, provides a private Docker daemon for test containers, uses secret placeholders, blocks network access by default, and records an audit trail. It supports agents including Claude Code, Codex, Gemini CLI, and OpenCode, with configurable network and filesystem rules, read-only mounts, MCP catalogs, and policy-based governance controls. It is distributed as the `sbx` command-line tool for macOS, Windows, and Linux, with stable, release-candidate, and nightly builds.

SPACE (Sandboxed Platform for Agentic Code Execution) is an open-source sandbox platform from Perplexity for running agent, user, and code-execution workloads in isolated Firecracker microVMs. Applications use its HTTP API to create Linux environments from templates, run multiple commands in a sandbox with a writable filesystem, collect output over a separate server-sent-events data plane, and pause, suspend, resume, or delete sandbox instances. Lifecycle changes are asynchronous and return operation IDs for polling; command sessions use attachment tokens. The platform supports Kubernetes deployments, a local Kind setup, an operator CLI, warm pools, base snapshots, observability features, and an E2B compatibility wrapper. SPACE is implemented in Rust and distributed under the Apache License 2.0.

E2B is open-source cloud sandbox infrastructure for securely running AI-generated or user-specific code, tools, and agents in isolated environments. Sandboxes can be started and controlled through JavaScript/TypeScript or Python SDKs, supporting command execution, code interpretation, desktop interaction, sandbox templates, and snapshots that preserve a running environment's filesystem and memory for pausing and resuming. The platform manages sandbox lifetimes, idle timeouts, workspace assignment, runtime filesystem writes, storage, orchestration, and network restrictions. It can be self-hosted using Embed deployment and Terraform on AWS, Google Cloud, Azure, or a general Linux machine.

Kubernetes-sigs Agent Sandbox creates isolated, disposable environments for running untrusted or agent-generated code. It is intended to separate such code execution from other workloads.