Docker and Sandboxing AI Agents
Podcast Archives - Software Engineering Daily

Docker and Sandboxing AI Agents

B2Upper-intermediateJuly 30, 202650 min
  • Interview
  • Technology

The most useful coding agents can mutate their environments by downloading packages, writing files, and connecting to services across the network. However, that freedom also presents dangers, and promises to usher in a new wave of security threats. Docker recently announced Docker Sandboxes, which give each agent its own isolated micro VM while preserving the familiar ergonomics of a container. A standard container shares the host’s kernel, but a micro VM emulates hardware and runs its own kernel, giving a stronger security boundary around code that cannot be trusted. Mark Cavage is the President an...

Play episode

Opens the player: the full transcript, every word clickable, with translation and flashcards.

Try it: tap any word

Real sentences from the start of this episode. Every word is marked with its level.

Sentence 1 of 12 · 0:00

,

writing files, and connecting to services across the network. However, that freedom also presents

Hear this sentence

Tap a word to see its meaning in your language.

Do you know these words?

8 harder words from this episode. Tap one to see what it means, then mark it.

  • B25:18
  • B28:25
  • B215:12
  • B215:28
  • B219:57
  • B228:43
  • C139:07
  • C147:15

Mark a few words and we'll tell you how this episode fits your level.

Is this episode right for you?

B2

B2 · Upper-intermediate

Comfortable if you already follow TV news

A1 33%A2 31%B1 18%B2 15%C1 3%
  • 82% of the words are B1 or easier.
  • 221 words a minute: natural, fairly fast speech.
  • 235 harder words (B2 and up) in the whole episode.

Transcript

The opening of the episode. The whole transcript is in the player.

0:00

The most useful coding agents can mutate their environments by downloading packages, writing files, and connecting to services across the network. However, that freedom also presents dangers and promises to usher in a new wave of security threats. Docker recently announced Docker Sandboxes, which gives each agent its own isolated micro-VM while preserving the familiar

0:23

ergonomics of a container. A standard container shares the host's kernel, but a micro-VM emulates hardware and runs its own kernel, giving a stronger security boundary around code that cannot be trusted. Mark Cavage is the president and COO of Docker, and he previously worked at companies including Stripe, AWS, and Oracle. In this episode, Mark joins Gregor Vann for a

0:47

wide-ranging conversation that includes why agents break the immutability assumptions containers were built on, how micro VMs differ from both containers and traditional VMs, and the still unsolved challenge of giving agents scoped, trustworthy access to sensitive services and data. Gregor Vand is a security-focused technologist, having previously been a CTO across cybersecurity,

That was the opening. The rest of the episode (50 min) is in the player: every word clickable, with translation, saved words and flashcards.

Continue in the player

Automatically generated from the audio. May contain errors. Audio belongs to its publisher and is played from their feed. Rights holders can request removal — copyright & takedown policy