Docker Announces Docker Sandboxes Kit Specification v3

Docker has published the Docker Sandboxes Kit Specification v3, an open-source standard for defining the runtime environment of AI agents and other workloads as an ordinary OCI image. The specification, available under the Apache 2.0 license, allows for the packaging of an agent's network rules, credentials, and volumes in a standardized and reproducible manner.

According to the announcement, the new version of the specification is now an ordinary OCI image rather than its own artifact, eliminating the need for a media type or sidecar file. This change simplifies the process of publishing and running Kits, as the manifest carries the declarations in one annotation, and the layers carry the content.

Christian Dupuis, Senior Principal Software Engineer at Docker, explains that Dockerfiles make software reproducible, but Kits make authority reproducible. The specification is designed to address the gap between the software itself and the environment it needs to run in, which has traditionally been unversioned and unreviewable.

Docker provides a sandbox CLI called sbx for testing and developing Kits. Users can install sbx via Homebrew and use it to run examples from the repository. Docker Cloud Sandboxes also runs the same Kits with the same trust model on elastic capacity.

The Docker Sandboxes Kit Specification v3 is part of Docker's ongoing efforts to improve security and reproducibility in containerized environments. Docker is also partnering with the Cloud Native Computing Foundation (CNCF) to bring the Sandbox Kit Spec to a neutral, vendor-independent standard built on OCI.

Source: docker