feat: add Docker sbx microVM runtime support#6101

Merged

lpcox merged 55 commits into

mainfrom

feat/docker-sbx-runtime

Jul 11, 2026

Commits on Jul 10, 2026

feat: add Docker sbx microVM runtime support

lpcox
and
Copilot
committed
ci: add sbx CLI install step to smoke-docker-sbx workflow

lpcox
and
Copilot
committed
fix: use 'sbx version' instead of 'sbx --version'

lpcox
and
Copilot
committed
ci: add sbx login step with Docker PAT authentication

lpcox
and
Copilot
committed
fix: strip secret env vars from sbx CLI calls

lpcox
and
Copilot
committed
fix: address sbx runtime review feedback
Copilot
authored
fix: pass full env to sbx create, sanitize only sbx exec

lpcox
and
Copilot
committed
fix: add sbx connectivity diagnostics before agent launch

lpcox
and
Copilot
committed
fix: add timeouts and verbose logging to sbx daemon/create/exec

lpcox
and
Copilot
committed
fix: remove sbx daemon restart, pass proxy via env to sbx create

lpcox
and
Copilot
committed
fix: add auth/daemon diagnostics before sbx create

lpcox
and
Copilot
committed
fix: background sbx daemon with nohup+disown for cross-step persistence

lpcox
and
Copilot
committed
fix: replace nonexistent 'sbx auth status' with 'sbx ls' probe

lpcox
and
Copilot
committed
fix: initialize sbx network policy before sandbox creation

lpcox
and
Copilot
committed
fix: use correct 'sbx policy init' (no --global flag)

lpcox
and
Copilot
committed
fix: add sbx help output for policy/create syntax discovery

lpcox
and
Copilot
committed
fix: use 'sbx policy init allow-all' for network policy

lpcox
and
Copilot
committed
fix: pipe 'y' to sbx create stdin for interactive confirmation

lpcox
and
Copilot
committed
fix: use 'yes | sbx create' to bypass interactive TTY check

lpcox
and
Copilot
committed
fix: add docker login for template image pulls in sbx create

lpcox
and
Copilot
committed
fix: validate Docker Hub credentials before sbx auth

lpcox
and
Copilot
committed
fix: remove DOCKER_SANDBOXES_PROXY from sbx create env

lpcox
and
Copilot
committed
fix: use printf for sbx login, add sbx diagnose

lpcox
and
Copilot
committed
debug: sbx create --debug logging + pre-agent create test

lpcox
and
Copilot
committed
debug: use workspace dir for sbx create test, dump policy help

lpcox
and
Copilot
committed
fix: convert Docker mount format to sbx positional format

lpcox
and
Copilot
committed
fix: add fs mount policies and pre-pull template image

lpcox
and
Copilot
committed
debug: dump policy profile/inspect/init help for mount policy

lpcox
and
Copilot
committed
debug: inspect policy details, try --clone and bare create

lpcox
and
Copilot
committed
debug: check KVM, try --clone and direct mount with --debug

lpcox
and
Copilot
committed
debug: early exit after auth step to speed up iteration

lpcox
and
Copilot
committed
debug: explore mount policy config, daemon logs, sbx setup

lpcox
and
Copilot
committed
debug: structured sbx mount policy diagnostics

lpcox
and
Copilot
committed

Commits on Jul 11, 2026