# agents container

A hardened Docker-in-Docker sandboxing environment, using gVisor kernel virtualization and a zero-trust Layer 7 proxy, for running untrusted coding agents such as Claude Code, Codex, Gemini CLI and OpenCode safely.

agents-container runs coding agents inside nested Docker containers with gVisor kernel-level virtualization and a zero-trust Layer 7 proxy, called ottergate, that inspects outbound DNS and HTTPS traffic to enforce domain-level access control, so an untrusted or misbehaving agent cannot reach arbitrary network destinations.

An ac command-line tool manages the environment: starting the nested Docker daemon and proxy, listing active sandboxes, checking container health and resource use, running an agent blueprint headlessly or in an interactive shell, limiting a sandbox's CPU, memory or GPU allocation, streaming host, proxy, gVisor or per-agent logs, wiping a sandbox's transient credentials while keeping its workspace, destroying a sandbox entirely, and tearing down the whole nested environment.

Pre-configured agent blueprints under agents/blueprints support agents including Antigravity, Gemini CLI, Claude Code, Codex, OpenCode, Pi and Qwen Code.

Website: https://github.com/gni/agents-container