Docker, Inc

📣 Workshops for WeAreDevelopers North America just dropped! We're kicking things off with a hands-on session from Michael Irwin on building an AI-ready developer environment. Learn how to manage models, runtimes, vector databases, and other AI tooling while keeping your local setup reproducible and consistent from your laptop to production. As AI development grows more complex, having an environment you can trust becomes just as important as the code you're writing - if you're building AI applications, this is a great place to start. Stay tuned for the rest! 📍 San Jose, Sept. 23–25 Get your ticket → https://lnkd.in/duyFhgtm

An agent executes code on a machine that can reach your filesystem, your network, and every other project on it. Isolation isn't a nice-to-have. It's the line between a runaway agent that's contained and one that takes out prod. At Black Hat on August 3rd, we're joining Snyk and Keycard to walk through the reference architecture that the three of us co-authored for securing coding agents. Hosted by Insecure Agents. Expect food and drinks, a live panel, and great networking. Register here https://lnkd.in/g7Cyx6ER

One of the most interesting ideas from this conversation: today's sandbox protects the agent. Tomorrow's sandbox may need to protect the code agent-written code itself. On this episode of AI Guide to the Galaxy, Oleg Šelajev sits down with Docker Sandboxes Product Manager Eric Jia to discuss where sandboxing is headed, why local AI still matters, and what developers should be preparing for next. Watch → https://bit.ly/4prZqLG

Running an AI coding agent in YOLO mode is one thing. Knowing what it can access is another. Ivan Kv of Shark Numbers compares Claude Code running in Docker Sandbox with Claude Code running directly on his machine, testing everything from file access to local credentials. If you're in (or about to be in) the process of securing your agents, this is a practical look at what actually changes when you give them a defined, isolated, MicroVM boundary. Watch → https://lnkd.in/gUM4QXzc

As software development changes, one thing hasn't: devs still learn best from other devs. In this conversation with The New Stack, WeAreDevelopers co-founder Sead Ahmetovic and Entire CEO Thomas Dohmke talk about the philosophy behind WeAreDevelopers, why it's coming to North America, and why dev-to-dev conversations are even more essential than ever. We’re so excited to help bring this event to you, and we’ll see you in September! Read → https://lnkd.in/e73E55pz

Many of the CVEs flagged in a ClickHouse deployment don't come from ClickHouse itself. They come from packages in the base image that the database never even uses. This walkthrough uses Docker Hardened Images to explain why base image choice has such a big impact on security findings, and what changes when you start from a hardened foundation. Read → https://lnkd.in/eTfkkEp5

"People thought it was a crazy idea... so I built it anyway." That's the mindset Docker Captain Mohammad-Ali A'RÂBI brings to software, and to building community. He shares why taking chances, building things that seem impossible, and saying "yes" to ambitious ideas has shaped his career. Watch, then get to know the person behind the red hat in our latest Captain’s interview. https://bit.ly/4fixLbt

Everyone agrees AI agents need isolation. But what comes next? On this new episode of AI Guide to the Galaxy, host Oleg Šelajev sits down with Docker Sandboxes Product Manager Eric Jia to talk about why local development still matters and where sandboxing is headed. They also explore how Kits fit into the picture, and why AI-generated code may become the next runtime problem developers have to solve. Watch → https://lnkd.in/gF_5DesH

The developer role is changing faster than any conference agenda can keep up with. That's why Docker is proud to be a presenting partner of the first-ever WeAreDevelopers World Congress North America, Sept 23-25 in San Jose. Our CMO Terri Avnaim on why this moment - and this event - matters: