We announced today that we’ve partnered with Docker to enable running NanoClaw in Docker Sandboxes with one command. You can read Docker’s blog post here.
Get Started
# macOS (Apple Silicon) curl -fsSL https://nanoclaw.dev/install-docker-sandboxes.sh | bash # Windows (WSL) curl -fsSL https://nanoclaw.dev/install-docker-sandboxes-windows.sh | bash
This handles the clone, setup, and Docker Sandbox configuration. You can also install manually from source.
Note: Docker Sandboxes are currently supported on macOS (Apple Silicon) and Windows (x86), with Linux support rolling out in the coming weeks.
Once it’s running, every agent gets its own isolated container inside a micro VM. No dedicated hardware needed. No complex setup.
How It Works
Docker Sandboxes run agents inside lightweight micro VMs, each with its own kernel, its own Docker daemon, and no access to your host system. This goes beyond container isolation: hypervisor-level boundaries with millisecond startup times.
NanoClaw maps onto this architecture naturally:
DOCKER SANDBOX (micro VM) Docker daemon (isolated) hypervisor-level isolation boundary Agent: #sales (Slack channel) Own filesystem Own context / memory Access: CRM, sales playbooks Tools: email, calendar Agent: #support (Slack channel) Own filesystem Own context / memory Access: docs, ticket system Tools: knowledge base, Jira Agent: #personal (WhatsApp) Own filesystem Own context / memory Access: personal calendar Tools: reminders, notes × ×
... continue reading