Hawker News

Docker Agent

github.com/docker

303 pointsby saikatsg144 comments

Olscore[38 comments hidden]
Interesting seeing other people's approaches to orchestration.

I've been working on Pullboard and just open sourced it: https://github.com/pullboard-dev/pullboard

To me, orchestration is not really the core problem. The bigger challenge is handling agent coherency over long periods of time, (drift) so my solution is a living forum-like system where agents shout to one another, document work in items, and follow doctrine handed down by the developer and work against a known specification that's checkable. I have used this workflow in several large projects that MUST be correct, and it works for me. Currently cleaning it up for other users.

pitched[30 comments hidden]
Not saying this counts specifically but I love seeing devs who hate Jira build something like Jira to solve managing a team of agents. It’s a beautifully ironic thing to watch.
jbp[18 comments hidden]
I don't think people hate issue tracking system, they just hate Jira.
redhale[13 comments hidden]
And I think most people who hate Jira actually just hate the process their company has imposed inside of Jira.

The vanilla out of the box product is actually quite close to old Trello, in simplicity. But there are so many ways to fuck it up and overcomplicate it, and so many companies proceed to fuck it up and overcomplicate it.

greggh[hidden]
This is absolutely it for me. I've never had to use a Jira instance that wasn't absolutely ruined by its maintainers.
saguntum[2 comments hidden]
+1

I have learned recently that I don't inherently hate JIRA, I hate our JIRA and byzantine process flows.

I think because other task trackers like Trello are simpler and have less config options (per my last use, long ago, pre-Atlassian-acquisition), it's impossible knock on wood to get into the antipatterns I've seen in those tools.

Ironically I think one of the main goals of management I have seen consistently over time - ensuring tickets are accurate, up to date, and reflect reality - would end up much more true if the task tracking tools were just much simpler, with fewer fancy features.

ionetan[hidden]
It might be you'd like Epiq. It is an issue tracker I built that actively does what it can to not be another Jira. It has way less fields and configurations per ticket (description, tags, assignees, attachments, comments), and it integrates with your code/repo, it is local-first and distributed so super fast. https://ljtn.github.io/epiq/
greysonp[3 comments hidden]
I actually just hate Jira :) It's horrendously slow for what it does, the search is mediocre at best, and I regularly run into bugs.
tomashubelbauer[hidden]
Yeah, my company has a simple, straight-forward system, but I still dread using Jira. And I love Linear, so it's not general ticket management system hate! Jira just sucks.
NBJack[hidden]
Can confirm. Every job I've seen it at, whatever form it takes, is consistently horrible.
makeitdouble[hidden]
And how their company setup JIRA is more often than not a decent representation of the company's vision of how work should be done.

So what they really hate is their company. Which is usually fair and understandable.

zerkten[hidden]
>> And I think most people who hate Jira actually just hate the process their company has imposed inside of Jira.

I think what you describe is a problem for a lot of people, but what isn't acknowledged is that some people don't want any kind of process, or rather, they don't want to deal with any kind of friction. These people don't like Jira without the customizations. They don't like equivalent tools.

Given these tools regiment the world to some extent, many programmers are fine with the minimal friction. However, you have big problems when people who don't value any process get into positions of authority. This is also often a problem when you interface with other units of an organization who don't understand the value of a process.

devmor[4 comments hidden]
I hate Jira because it’s one of the slowest applications I’ve used since the i486 days and the UX is designed to force you to click across 3-4 different fields and modals to accomplish an action that should be one form.

It’s business software for business people that need to be guided through SOP because they have so many different workflows, not engineers that have streamlined work processes to reduce mental load on non-engineering work.

ionetan[3 comments hidden]
Would you be more inclined to use Epiq? It is instant, as every write is local, synced over Git. It is built with engineers in mind. I'm its author for disclosure.
devmor[2 comments hidden]
That actually looks pretty incredible, including some features I never knew I wanted.

Unfortunately I work for a very large corporation and don’t have the pull to get something like Epiq brought on - but I am definitely going to evaluate it for my non-FTE work.

As a side note - it was impossible to find your project through search engines. I only found it by searching on github itself.

ionetan[hidden]
Hey, thanks for the kind words. I need to get to the bottom of Epiq not showing up in search engines! It doesn't help that Skoda released a car model with the same name a month or so after :D. Totally understand the large corp dynamics!
Zambyte[3 comments hidden]
Yup, I literally just hate their web UI. Once I found the Atlassian-blessed jira "cli" [0] (after searching for a long time for a tui, which is actually what the "cli" is primarily) I have actually be fine with using Jira again. As an added bonus, being a cli has made it easy to interface with using my AI tooling.

[0] https://github.com/ankitpokhrel/jira-cli

conception[2 comments hidden]
They released twg mainly for agents which is totally fine and useful as well.
alemanek[hidden]
2nd this but I did need to write a session start hook to prune out most of the skills so it was just the non Rovo ones. Took about 15min to setup though so I am not complaining. twg works really well.
x-complexity[hidden]
Exactly. A plain basic issue tracking system is all that's needed for 90% of cases.

Need a specific feature? Plug that in later when you actually need it.

pea[hidden]
I think we'll see it more and more... open-ended Q&A / novel work is everyone's first experience of LLMs, but I don't think it's actually representative of most of the work people do. Coding kind of sits in the middle as it's novel but semi-structured.

Chat is great for novel open-ended work, but is terrible at concurrency - i.e. managing > 1 agent runs. As agents get cheaper, I suspect we'll see more more bounded processes where you want to run lots of items through them at once, and thus Jira-like things... (we ended up having this problem and building something like this, albeit more medieval themed [0])

We also found the other piece that Jira-style solves (and that chat makes super hard) is multi-player. I've yet to see a good implementation of a multi-player chat solution to agents working concurrently; and we found that an async model is the only sane solution to this.

[0] https://pumpup.com

jredwards[hidden]
Gas Town did the same thing back in January. It's probably got three more layers of abstraction on top of it by now.

https://yegge.ai/gastown

blitzar[hidden]
Hatred is love frustrated
xgb84j[4 comments hidden]
You either die a software engineer or you live long enough to see yourself become the project manager.
dummydummy1234[hidden]
We're all project managers now...
wccrawford[hidden]
Or you get laid off and go do something else. :/
ngruhn[hidden]
beautiful
dionian[hidden]
used jira from its beta days. i never hated jira. i hate what they (companies) did with it though
toddmorey[2 comments hidden]
I get it, but would YOU use Jira to manage agent-based work cycles?
pitched[hidden]
Hell no but the days of saas products are gone. Why pay for that when I can have agent build an equivalent in 10 minutes?
ogou[hidden]
I have been using Backlog.md in precisely this way and it's very effective. The finished tasks end up being a knowledge store that the git history doesn't handle. I just finished a really large project that was planned, specc'd out, and broken up into backlog tasks. As I went through each task I stored all the changes and business logic issues in the task. Having a time stamped record of the thought process and experiment results has been very useful. https://github.com/MrLesk/Backlog.md/
j_bum[2 comments hidden]
> The local-first work board for teams of coding agents. Nothing ships until a second agent verifies it.

> gate: failing

Gave me a good chuckle. Cool idea though, and I like the records. Reminds me a bit of the OpenAI hacking incidents.

Olscore[hidden]
Haha. Locally it was passing. That badge is GitHub running the tests on its own machines, where a couple of new browser tests fail. Fix is going through the same loop: one agent fixes, another verifies, then it merges.
taocoyote[hidden]
A lot of the approaches to orchestration that I have seen feels like a company hiring more managers to make the dev team work faster.

Thank you for coding something that I intended to code but have been too lazy to do.

smashed[hidden]
I'm trying to fix the "agent said work was done, it was not" problem by defining work as runnable specifications in the form of a pytest suite.

Work is first defined in new or updated specifications, then the change gets made. You have to resist making natural language Todo lists and have the agent write runnable unit tests. My project is a CLI tool so it's fairly easy.

Verifying if it's done is a matter of running the specifications test suite.

In a totally not original way, I'm testing this workflow in my own agent orchestration tool. I know, there's just so many already. I'm building it for myself.

So far, the system is holding up but it's way too early to declare it a success.

You can check it out here:

https://github.com/egzo-ai/egzo/tree/main/specs

I think the same idea could be applied to other projects in different domains.

With this workflow I can read and update the specs, and run it against a built binary and be much more confident that the code works. Claude code has picked up the system without complaining for the most part.

mgw[hidden]
Congratulations on shipping! Really interesting ideas in there, especially the Doctrine.

We also open-sourced a similar system called https://github.com/madeinorbit/podium

We do have what you call Items and Shouts in the form of an agent communication system and a Linear style issue tracker that agents and humans use together.

In our case everything around orchestration is discussed with the agent itself and they take action for the user via our CLI. We found any UI to prescribe how teams of agents should coordinate too clunky. So in our case you just tell the agent: "every codex luna max implementer gets an opencode muse spark reviewer. when a subtree is done, review with opus high.". It then sets up the graph and the system enforces the rules.

It works really well for us.

iamjustrach[hidden]
pullboard looks pretty interesting, how does it compare with other frameworks! do you have any benchmarks on that regard?
gerwim[hidden]
Hehe, looks nice. My take on it is ForgeBoard (name will be changed soon though): https://forgeboard.gerwim.com/

How do you handle the context? As in: you have a forum like system as you say, how are agents finding the correct "posts"? How do you handle drift or specs that change over time?

woah[5 comments hidden]
> docker-agent lets you create and run intelligent AI agents that collaborate to solve complex problems — no code required.

How is "no code required" a selling point when we all have agents that can almost instantly puke out all the mostly-correct code you could want?

crossroadsguy[hidden]
Code means a bit of mental engagement, more than yaml, json etc. You either review that or not review that, but it's an addition. While I am not touching anything made by docker-the-bloater anytime soon, I could think that at least.
hahn-kev[2 comments hidden]
Yeah that is odd. Also most non programmers would say yaml is programming
partyficial[hidden]
At the end of the day, all programming is language. it just happens to be languages normal people don't speak.

All these translation layers exist because the computers only understand 0s & 1s. Imagine talking to a person who only understood binary numbers.

aheritier[hidden]
The GO API can be used to build something custom ( https://docker.github.io/docker-agent/guides/go-sdk/ ) but for a many cases you can just iterate with the YAML config and docker-agent binary
blakeashleyjr[29 comments hidden]
While I love new open source dev (especially in Go!), agent harnesses are turning into JS frameworks from yesteryear.

All the cool kids have one!

pjmlp[hidden]
Coupled with VSCode forks to manage them
verdverm[11 comments hidden]
Go doesn't have a good mod/plugin story for harness devs to provide to their users

I say this as a gopher who also has a custom harness written in Go, it's a real challenge compared to the TS setups, but TS plugins are also a security concern

gandreani[2 comments hidden]
I agree! Comes with the territory of a compiled language I suppose?

I haven't given this much thought (I also just started with golang last year) but I'm assuming the only real path here is to provide extension SDKs in Lua or other languages whose interpreters have been implemented in go.

I think that's what grafana's k6 [1] does with a JS interpreter

[1] https://github.com/grafana/k6

verdverm[hidden]
I was thinking I recalled something like that, but the nice thing about the TS ecosystem is that you can write the same language, importing and using the harness sdk types.

Go has the plugin package, but I haven't actually seen anyone use it (outside of toys and blog posts)

https://oneuptime.com/blog/post/2026-01-25-plugin-system-go-...

ChaseRensberger[2 comments hidden]
curious your thoughts on my approach: https://docs.wingman.actor/extend/plugin-quickstart/
verdverm[hidden]
fails at step two, precompiled binary is already built, you can't change the code

why not just use an SDK where you are using a plugin?

otterley[4 comments hidden]
Why isn’t IPC good enough?
verdverm[3 comments hidden]
My custom harness has a dagger based environment, binary runs in the host, every tool call and file modification creates a new layer in a container - for better session time travel and forking

It may work for some things, but you really want to be wired into that system to do the more interesting things.

otterley[2 comments hidden]
I don't understand why dynamically loading code into a Linux process is essential to make this work. Can you explain?
verdverm[hidden]
I didn't say it couldn't work, it's just way more complexity and effort with IPC or Go than TS. That's one of the reasons harnesses are choosing TS. It's also a very popular language.
edoceo[2 comments hidden]
Somehow Mattermost, written in Go, allows plugins.
verdverm[hidden]
yup, with an http API, not a plugin the way most harnesses are doing it today
ChaseRensberger[hidden]
none are as great as https://wingman.actor!

jk its trash

yipinwong[11 comments hidden]
You know which one will win for sure. ones with the worst experience.

Vue and svelte are easy to use and learn/adopt. But look what won. React.js.

So whatever the ai agent with the vast user basae will win regardless.

---

I know it's a slippery slope, but given you brought up JS framwork analogy, I had to fall into it

girvo[2 comments hidden]
I mean as someone who was there at the time, early React was easy to learn and adopt. It’s complexity came later after it had already won

Now Angular v1, man… if I ever see another digest loop error in my life, I will scream

ravenstine[hidden]
So glad I never had to deal with Angular, especially v1. I tried learning it and it just seemed like it would actually make applications more incomprehensible than before. React originally addressed the actual problem that most frameworks mistook for not being that important. I still don't particularly like React, but it makes sense why it became popular.
ravenstine[5 comments hidden]
It's all about what story you can tell.

Cursor is easily the worst experience I've had with an AI harness, yet it was acquired for billions of dollars in spite of being a middleman tied to a ripoff of VS Code. None of the colleagues of mine who were touting it last year are still using it. But if you can make yourself look like the next big thing, you'll get money thrown at you. Just look at Omarchy.

A good experience necessarily takes time and careful thought. Nobody these days can do that while also remaining relevant, or even surviving.

hhh[hidden]
Omarchy is such a shit distro but it has a nice enough basic ricing for the WM
disgruntledphd2[hidden]
> Cursor is easily the worst experience I've had with an AI harness

I kinda like cursor, mostly because it provides a nice review UI and I can use whatever model I want.

Getting away from all the Claude-speak has been a revelation, and fortunately Anthropic helped me here by hyping up GLM 5.3. Like, if there's an open weight Fable competitor, then why wouldn't I use it?

xkcd-sucks[hidden]
What do you prefer to Cursor and why? Just asking because I don't really experiment w/ AI harnesses much outside of work, where cursor has a lot of traction, and I'm too burned out to explore much these days
skylake5[hidden]
I get your point but cursor is fine. And it might be an unpopular opinion but grok 4.7 is also good inside cursor. So yes it might be acquired for a lot but it kinda worked for both parties well.
v3ss0n[hidden]
A good model with svelte make things buttery smooth.
shepherdjerred[2 comments hidden]
Many people genuinely prefer React over Vue/Svelte
pjmlp[hidden]
Some of us would rather use Angular, or none at all.

React was cool before the hooks and "use whatever" all over the place.

Terr_[hidden]
"Look, LLMs will free you from the tyranny of frameworks!"

"Uh, OK, so how do I get this thing working? Where are the docs?"

"Well, first you install its unique framework..."

crossroadsguy[2 comments hidden]
With the advent of LLMs my one true hope for humanity was the final death of the "JS/ilk things" like Electron, React Native, other things like that, and the culture of "everything is TS/JS or can be turned into that". Looks like it's rather growing exponentially.
lifty[hidden]
Rust + GPUI is becoming the new hotness, and I’m all up for it.
pianopatrick[hidden]
And just like js frameworks, the "winner" will likely be the one that solves problems big tech companies have.

Which will probably also be complex and a bit slow and a bit hard to learn because of all the big tech company problems it solves

McScrooge[7 comments hidden]
https://docker.github.io/docker-agent/configuration/sandbox/

If, like me, you couldn't find any security-related info on the linked page.

ShinyLeftPad[hidden]
i remember going through the entire docs of docker sandbox and there was not one mention of attack vectors. did they fix that?
gregwebs[5 comments hidden]
Docker Agent is a harness. There is a sandbox mode that can be used to run it in docker sandbox (a VM, not a container). If you don't use sandbox mode then I assume it is running in a container.

If you don't want to use their harness then you wouldn't use docker agent and instead use their `sbx` cli to run the harness of your choice (claude, codex, pi, etc).

I think it will be great if Docker can get people used to using secure VMs. I am developing a similar project (still a work in progress): https://github.com/gregwebs/agent-vm

genghisjahn[3 comments hidden]
I've found sbx to be very helpful. really like the sentinel value wrapper they have going so you can add secrets but the model can't see them. Outbound calls get looked up by sentinel value and the real one goes out to whatever API you're auth'ing too. There's other features but just having claude run in a sandbox and easily see what it does and doesn't have access to has been great.
gwlthr[2 comments hidden]
I just wish sharing whitelisted domains between sandboxes were easier or more intuitive. Last time I tried doing this with sbx I was handling their yaml files by hand.
genghisjahn[hidden]
# Allow network access globally (all sandboxes) sbx policy allow network <domain>[,<domain>…]

# Remove a global network rule sbx policy rm network --resource <host>

# Remove a sandbox-specific network rule sbx policy rm network --sandbox <sandbox> --resource <host>

virtainer[hidden]
Interesting, we're doing something similar, but unlike yours, we focus on the server side for teams. We even wrote a blog post about this Docker and Apple container idea. https://virtainer.io/blog/docker-sandboxes-and-virtainer-app...
blutoot[6 comments hidden]
I'm honestly getting lost between what primary usecase/workflow each of these is intended for: 1. https://kagent.dev/ 2. https://github.com/kubernetes-sigs/agent-sandbox 3. https://github.com/docker/docker-agent (this project) 4. https://docs.langchain.com/oss/python/deepagents/sandboxes#s... 5. https://www.cloudflare.com/products/sandboxes/
reactordev[5 comments hidden]
so is everyone else. We're all building the same stuff.
conception[hidden]
Basically this forever https://delightful-marigold-803f7f.netlify.app/
phrotoma[hidden]
you can do anything with zombocom
_joel[hidden]
We're all typing in the same prompts
ngruhn[hidden]
I'm definitely building that shit as well.
mplewis[15 comments hidden]
What does this have to do with Docker?
redleader55[hidden]
The quest for staying relevant.
speedgoose[6 comments hidden]
I guess people at Docker wanted to make an agent.

Having it docker branded, I could understand. It’s confusing but the docker brand is strong.

But exposing it as a docker subcommand is very confusing to me.

binsquare[4 comments hidden]
It reads to me like chasing trends
throwitaway222[hidden]
That's the economy we've always been in. X is popular, if your company doesn't have a solution for X you're irrelevant.
verdverm[hidden]
the tools and features certainly indicate so
sleepybrett[hidden]
that's all docker has been doing for years.
dgageot[hidden]
You don't really have to use the docker agent sub-command. docker-agent is a standalone binary. When it was created, though, 1.5 year ago, the idea was that it would be the docker compose for agents (original name was cagent, compose for agents).

But it evolved differently and although it runs very well in docker containers and docker sandboxes, it also runs very well anywhere else.

bmacho[hidden]
Based on the repo short description and the first sentence of the readme:

It is called 'Docker' as the company, and it has nothing to do with the container technology.

esafak[hidden]
It's the Docker you know and love... with AI!
nwhnwh[hidden]
This made me laugh. Not sure why. But the whole situation is very absurd now.
sneak[hidden]
Docker is rapidly fading into irrelevance now that they have missed their strategic acquisition interval via the Microsoft collab misstep, and now has to hype chase as fewer and fewer people believe in their long term viability as a company.

Great tech. Not a business.

cryptos[3 comments hidden]
This was also my first reaction. I'm always doubtful if projects add features that are not really close to the core use case.

Does anyone remember all these web portals from 2000? What people mostly wanted was a search engine but they added everything else and lost focus.

totetsu[2 comments hidden]
I predict a comeback for the portal sites now that everyone is a webdev, and can make their own tools. the problem is how to share them.
cryptos[hidden]
I could imagine some AI powered personal portal. This would basically answer the question "What is important and interesting today?". But that would have nothing in common with the old portals like Lycos.
beckford[2 comments hidden]
Docker Agent could be beneficial for research studies. For example, while writing a ML paper about agents I need to rerun experiments so that: - others can repeat my results - validate that variability from LLMs is not causing overconfidence in the results

But currently uv is good enough to create isolated, repeatable environments. And it isn't limited to Linux like standard Docker. So when I want to test small samples on my local PC's GPU (Windows or mac) before running on beefier hardware, I can do that easily.

agentdev001[hidden]
I mean, if you're going to do that at scale, not that you are, but something like https://github.com/kvcache-ai/AgentENV is much more suitable for research purposes
CBLT[10 comments hidden]
I tried really hard to make this work for me a couple of weeks ago but it was the brittlest harness out of any that I've used. I'd come back when it's more mature.
dgageot[6 comments hidden]
Would love to know what didn't work for you
CBLT[5 comments hidden]
Sessions just broke all the time for me. The one time I dug into it, it ended up being a known issue where if codex returned over 10k characters for a turn it breaks the session. Because docker agent does not use protocols like ACP, instead trying to parse Codex's internal state in a brittle manner.

I tried not to do anything too crazy, but even use using an API key in the docker agent natively was getting me sessions that would hang and couldn't be recovered.

dgageot[3 comments hidden]
Combination with Codex is indeed not the most common use case around us. I'll see what can be improved. Sorry that it broke your workflow!
nujabe[2 comments hidden]
How is not using it with the most popular coding agent not a common use case?
girvo[hidden]
Not the most common use case around them: likely meaning that the Codex harness isn’t used that often internally at Docker, is what I would surmise, at least that is how I read it.

I work at another big tech company, and up until recently that would’ve been true for us as well (but it’s changed now, we partnered with OpenAI)

aheritier[hidden]
In your use case you wanted to control codex from docker agent thus you used our harness integration ( https://docker.github.io/docker-agent/features/harnesses/ ). It was not codex calling docker agent which should work with ACP ( https://docker.github.io/docker-agent/features/acp/ ). We could effectively look at using ACP from docker-agent to control others harnesses if it's useful.
triyambakam[3 comments hidden]
> bittlest

Sorry, what do you mean there?

shawabawa3[2 comments hidden]
Typo for brittlest, most brittle
CBLT[hidden]
Correct. Updated the message to brittlest. Thank you.
magnusokik[hidden]
We built something similar, the ideas are strangely converging for production it feels like. But we used routing rather than direction agent invocation of agents. It gets exhausting to keep track of large number of concurrent agents. Best to keep a single orchestration agent that can route to agents based on capabilities.
rodolphoarruda[3 comments hidden]
Last year (2025), I lost count of how many times I tried using an LLM to set up Docker. It was still the era of prompting, then copy-pasting the response and seeing if it worked... and it almost never did. It’s great to see this new Docker agent. For me, it would be even more appealing to see an agent and a model specialized in Docker working together, capable of proposing advanced configurations and getting them working on the first try.
aheritier[hidden]
Modern models should be better with mainstream technologies like docker engine or docker compose, but still to try to help them we started to work on distributing skills ( https://github.com/docker/skills ) in addition of our specialized agent (gordon) integrated in various products.
scottydelta[hidden]
I literally built this for self hosting apps at Tarvis.io

You can drop any GitHub repo and the agent builds and deploys the app to your Tarvis workspace along with taking care of ssl domain and any other configuration and making sure the app is healthy.

tamimio[5 comments hidden]
>What it is, what it isn’t

Yep, open ai sol model wrote that.

lukemercado[3 comments hidden]
It frustrates me that there's a prisoners dilemma in communicating this to other humans. If I flag it and write it out (as you've done) I've let the author know that they're losing trust and let others know that they should be more skeptical. I've also created the perfect eval data pair for the ai labs. It's deeply frustrating.
baby_souffle[hidden]
I think the cat is out of the bag.

There was a brief point in time at the beginning of the internet where if you saw an image online you could be kind of confident that it hadn't been manipulated significantly... But somewhere around the mid to late 2000s it became prudent to just assume any image you've seen online got at least a blemish filter pass through something like Photoshop.

Same thing now with written text. Sometimes you'll be a little bit more or less sure than an llm produced the output but never able to say 100% confidently.

cyanydeez[hidden]
AI is going to eradicate, for good, all trust in the Internet.

That's a benified "not a drawback".

IncreasePosts[hidden]
Your probably spare yourself some RSI by inverting this and only writing out a message when you find human generated content on hn
pomsense[hidden]
The models are converging (directionally), and the rest of us, including all these agent harnesses, are trying to figure out how to stay relevant
maxdo[hidden]
they hope they can annoy and email every person in the org asking for money , same way as they did it with docker.

looks like a weird abstractions. why do i need this if i have modal.com, e2b, cloudflare that use original docker + some toolings around + way to run + isolations on network level.

segmondy[hidden]
Better read the terms and conditions and if they can retain your data, docker now collects inputs and outputs ...
tonymet[2 comments hidden]
If Docker is containerized resources ( cpu, memory, iops, network) with configured limits , I would like to see more ACLs around command and credential restrictions

Something like a containerized sudo ACL for commands and for network credential , scoped by oauth scope

That way you could truly establish boundaries for an agent before it’s launched , and it could request additional permissions during execution .

Miyamura80[hidden]
Hey! We built infrastructure that can provide ACLs around command & credential restrictions, using MCP as auth middleware encrypted credentials to prevent agent overpriviledge - see sealgate.ai and let me know if this solves any issues here
kingcauchy[hidden]
I'm curious about these agent harness frameworks that release their harness before they've released a good agent on top. It's a little cart before the horse.
sergiotapia[2 comments hidden]
very weird. why does this have dockers name on it? might as well use an agent harness from kohl's or steak n' shake. odd..
dgageot[hidden]
It was created to be the docker compose for agents. 2 years ago, people, including ourselves, started to mix agentic loops and non agentic components in docker compose files. We created docker agent to make this more powerful.

At the end, the link with docker compose is just the yaml form. Which by the way can be replaced with hcl files or Go code.

mgdev[hidden]
YAML-defined agents are great.

Have you considered making a cloudy, managed version?

maximilianfeix[hidden]
Really important repository for me. I virtualize all my cloud server with docker
obilgic[hidden]
personal plug :) https://github.com/oguzbilgic/kern-ai
esafak[2 comments hidden]
What's new or interesting here? Docker's AI story ought to be around sandboxing, yet the word appears nowhere. Oh, and it's YAML, which I despise.
dgageot[hidden]
Docker Agent predates Docker sandboxes. It was created almost two years ago when not everybody had a AI harness. Nowadays, it does run very well in Docker Sandboxes but it runs also very well anywhere you like.
smashah[hidden]
Why can't we set the harness? Seems like the missing piece
ContinuityLab[hidden]
Bringing first-class agent orchestration directly into containerized environments is a logical step for secure, reproducible developer workflows.
mococa[hidden]
Pretty vague
throwrioawfo[hidden]
gimmick
NamlchakKhandro[hidden]
i mean... what's the point.

just use and customise Pi.

Nothing else even comes close.

leowoo91[hidden]
is there a word for enshittification by ai?
ravenstine[hidden]
Just what I need in my life; more YAML! /s

I'm not sure why anyone would want this. Is there something this actually does better than any other harness? Do current harnesses suck that bad at orchestrating things like Docker? If I do all my work inside a Linux VM and tell an agent inside of it what I need done, it figures out everything, including container orchestration.

The very job that AI gents are meant to do should mean that most of the documentation for this Docker Agent is obsolete/unnecessary.

rfgplk[3 comments hidden]
> Go

Nowadays there are only two justifiable public languages you should be using for anything a) C++ b) Rust

Rust itself is dubious due to abysmal compile times and the fact that the only guarantees it gives you are of security (aka a skill issue). Modern LLMs write C++ that is as safe if not safer than Rust. Any other language choice is objectively wrong.

* For those inquisitive enough the keyword "public" is doing all the heavy lifting here. Pretty much everyone should be developing and using an in-house DSL at this point.

furyofantares[hidden]
Yeah well I'm doing everything in AssemblyScript.
triyambakam[hidden]
This is an almost rage bait take, but in any case I agree that the models ability to write correct code and fuzz and test that code does make language choice a different tradeoff than it was before.