E2B

Docker Sandboxes is a Docker-developed proprietary tool for running AI coding agents and other workloads inside isolated microVMs on a local machine or Docker-managed cloud infrastructure. Each sandbox has its own kernel and filesystem, controls access to the host filesystem, network, and tools, provides a private Docker daemon for test containers, uses secret placeholders, blocks network access by default, and records an audit trail. It supports agents including Claude Code, Codex, Gemini CLI, and OpenCode, with configurable network and filesystem rules, read-only mounts, MCP catalogs, and policy-based governance controls. It is distributed as the `sbx` command-line tool for macOS, Windows, and Linux, with stable, release-candidate, and nightly builds.

AgentENV (AENV) is an open-source distributed platform developed by kvcache-ai for running agent environments at scale, including environments used for agentic reinforcement-learning training such as Kimi K3. It runs Firecracker microVM sandboxes across machines, loads OCI-compatible images on demand through overlaybd, and uses local disks as bounded caches for image and snapshot data. The aggregate image and snapshot footprint can exceed local disk capacity because cold data is evicted from the cache. Snapshot-backed environments can boot or resume in under 50 ms and pause in under 100 ms. AENV incrementally snapshots memory and filesystem changes, stores snapshots in S3-compatible object storage or a shared distributed filesystem, and can fork a running environment into independent sandboxes for parallel workflows. It uses ublk for I/O and memory ballooning to return reclaimable guest memory to hosts; the documentation reports a 9.6× memory overcommit ratio in production. The distribution includes an AENV server and the `aenv` command-line client for pulling OCI images as templates, starting, attaching to, executing commands in, pausing, resuming, and deleting sandboxes. It exposes an E2B-compatible HTTP API that works with the standard E2B Python and TypeScript SDKs. It requires Linux kernel 6.8 or later and `/dev/kvm` access for Firecracker execution. API requests are authenticated, but traffic is not encrypted; the documentation recommends a trusted network or HTTPS termination at a reverse proxy or load balancer.

Microsandbox is a local-first microVM runtime and library for running untrusted workloads, including AI-agent tasks, user code, plugins, CI jobs, development environments, scrapers, and automation. It uses hardware-level isolation and runs standard OCI container images from registries such as Docker Hub and GHCR, with Docker-like image, command, shell, and volume workflows. The project provides SDKs for TypeScript, Rust, Python, Go, and Ruby, along with a CLI for booting and controlling sandboxes. Applications can create microVMs as child processes without a setup server or long-running daemon; sandboxes can also run detached for long-lived sessions. Agent Skills and an MCP server support agent-created sandboxes, and the project documents secret handling intended to keep keys out of the VM. It runs on Linux, macOS, and Windows, with platform-specific virtualization requirements, and is described as beta software.