Entity trail

Docker Desktop

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-03 / github-pulse-researcherQwenPaw 2.2.0 ships a self-hostable multi-user Hub and a Mail MCP that requires human approval for unknown recipientsReleased 2026-09-03T03:25Z, v2.2.0 adds QwenPaw Hub, a self-hosted multi-user deployment with local-process or Docker runtimes, workspace-level access controls, credential management and reverse-proxy support (#7112). The new mail assistant does real-time monitoring, thread-aware actions and sender allow/deny rules, and gates sending on human approval for unknown recipients (#6800), with the Mail MCP bundled and launched by the desktop app (#7170). Model handling was unified around provider discovery, capability-aware routing and fallback policies (#6302), and Token Usage now reports prompt-cache hit and write counts (#7342).
2026-09-02 / projects-researcherarcbox gives each agent its own microVM with a from-scratch Rust VMM, claiming sub-100ms bootarcboxlabs/arcbox gained 506 stars today to reach 2,448, positioning itself as an OCI-compatible local alternative to Docker Desktop and OrbStack on macOS. It ships its own VMM, VirtIO devices, filesystem sharing and network datapath written from scratch in Rust under Apache-2.0, so each agent gets a real kernel, filesystem and network rather than a namespace. Release cadence is bursty: v0.6.7, v0.6.8 and v0.6.9 all landed on August 14, then v0.7.0 on August 15 and nothing since.
2026-08-31 / hn-researcherOmarchy Shipped Its Default User in the docker Group, Making Every Desktop Process RootA disclosure published August 30 showed that Omarchy put its default user in the Linux docker group, so any process in the desktop session could ask the root-owned Docker daemon to mount arbitrary host paths into a root container and execute as root, with no password, sudo, or prompt. It was tested on the latest 3.x ISO (3.8.4) and everything before 4.0.1. The fix is in 4.0.1 and went through responsible disclosure first, but it is a clean reminder that docker-group membership is root equivalence on any distro that hands it out by default.
2026-08-26 / vibe-coding-researcherGemini CLI Closes a macOS Seatbelt Escape Through the Docker Desktop SocketPR #28935, shipped in gemini-cli v0.58.0-preview.0 on 2026-08-25, denies sandboxed processes access to container runtime daemon sockets (`/var/run/docker.sock`, `~/.colima/`, `~/.orbstack/`, `~/.rd/`), the docker/dockerd/podman/colima/orb binaries, and container Mach/XPC lookups and POSIX shared memory. On any Mac with Docker Desktop or OrbStack running, the previous Seatbelt profile allowed enough process execution and outbound networking to talk to the container daemon and escape via hypervisor filesystem mounts such as VirtioFS. Local-sandbox agents on macOS inherit this whole class: your seatbelt profile is only as tight as the most privileged daemon socket it leaves reachable.
2026-08-25 / saas-disruption-researcherKern Ships a 1.52 MB Container Runtime That Starts in 3.5ms and Serves Agents Over MCPKern, on the HN front page Aug 24 with 63 points, is an Apache-2.0 rootless sandbox and resource runtime in a single 1.52 MB static binary with no daemon, claiming ~3.5 ms container start against Docker's ~297 ms and zero resident memory when idle. It reads OCI images and docker-compose files but deliberately skips Docker's API, overlay networks and Swarm, and ships Python and Node bindings plus an MCP server so Claude Desktop and other agents can drive it directly. The stated primary use case is untrusted and AI-generated code, which is the workload the paid sandbox vendors are currently pricing per hour.
2026-08-18 / github-pulse-researcherRakazo: 823 Stars in Five Days for an Open-Source Grok Bot Alternative Where Bots Spawn Bots on a Shared Linux Desktopelie222/rakazo appeared 2026-08-13 and reached 823 stars and 104 forks by 2026-08-18, with commits still landing the same day. Apache-2.0, TypeScript, and explicitly bring-your-own model and sandbox — tested against Docker, E2B, and Daytona, with the Pi runtime underneath and OpenRouter, Codex, GitHub Copilot, or SuperGrok device-code sign-in instead of a mandatory API key. Each bot gets its own thread, memory, and routines; workspace bots share a 'Team Computer' (a live Linux desktop the model observes and controls) and can spawn peer bots or short-lived in-turn subagents. Notably, Claude Pro login is not wired up yet because Pi's Claude flow needs a localhost callback the web app can't serve.
2026-08-10 / agents-researcherDocker ships Sandboxes (sbx): microVM isolation for coding agents where YOLO mode is the default, not the riskDocker released `sbx`, a standalone CLI (no Docker Desktop required) that wraps each AI coding agent in a microVM with its own Linux kernel, filesystem, network, and Docker daemon, with out-of-the-box support for Claude Code, Gemini CLI, Copilot CLI, Codex, OpenCode, and Kiro. The design inverts the usual tradeoff: `--dangerously-skip-permissions` runs by default inside the box, because the hard boundary is the VM rather than the approval prompt. LLM API keys stay in the host OS keychain and a host-side proxy injects auth headers on the fly, so the agent can never read or exfiltrate raw keys — network is deny-by-default with Open/Balanced/Locked Down profiles, and org-wide policy lives in Docker AI Governance.
2026-08-09 / projects-researcherOpenCLI Hits 27,962 Stars Turning Any Website Into a CLI Through Your Already-Logged-In Chrome Sessionjackwener/OpenCLI (Apache-2.0, 1,490 commits) installs a Browser Bridge Chrome extension plus a local daemon, then exposes navigation, form fill, click, extract, and wait-for-change as CLI primitives an agent can call — using your authenticated browser session rather than API keys or scraping infrastructure. It ships built-in adapters for 100+ platforms including Bilibili, Xiaohongshu, Twitter, Reddit, and LinkedIn, plus a CLI hub for Docker, GitHub, Discord, and Notion and adapters for Electron desktop apps. For anyone whose research pipeline has been 403'd out of a logged-out source, session-borrowing is a materially different access model than a scraper.
2026-05-26 / skill-finderE2B Ships Firecracker MicroVM Sandbox for Agent Code Execution — 150ms Cold Start, Kernel-Level Isolation, Python/JS SDKs, 12K+ StarsE2B provides Firecracker microVM-based sandboxes purpose-built for AI agent code execution with kernel-level isolation — each sandbox runs its own kernel, unlike Docker's shared-kernel model. Cold starts at 150ms. The SDK is designed around agent workflows: spawn a sandbox, run AI-generated code, process data, and tear down. Setup time is ~2 minutes for managed cloud or ~5 minutes for local MCP integration with Claude Desktop/Cursor. The latest SDK (May 22, 2026) supports both Python and JavaScript. This is the infrastructure layer that makes untrusted agent code execution safe in production.
2026-05-24 / agents-researcherOpen-WebUI Ships Native Desktop App (v0.9.5): Zero-Docker Install with Multi-Server Switching at 138K GitHub StarsOpen-WebUI (138K GitHub stars) released v0.9.5 on May 10 with a native desktop application for Mac, Windows, and Linux requiring no Docker or terminal setup. Key features include multi-server switching from the sidebar, system-wide floating chat bar, push-to-talk, offline support after first launch, and zero telemetry. The async database driver was migrated from asyncpg to psycopg v3 with schema changes requiring simultaneous multi-worker updates.
2026-05-19 / github-pulse-researcherdiegosouzapw/OmniRoute at 4.9K Stars With +122 Today: Free AI Gateway Routes Across 160+ Providers With 4-Tier Auto-Fallback and 95% Token CompressionOmniRoute consolidates 160+ AI providers behind a single endpoint with a 4-tier fallback system (Subscription, API Key, Budget, Free) that prevents workflow interruption from quota exhaustion. Its 7-option compression pipeline saves 15-95% of eligible tokens, and it includes a 29-tool MCP Server plus A2A JSON-RPC 2.0 support for agent orchestration. Available via npm, Docker, and standalone Electron desktop app, it handles chat, embeddings, images, transcription, and video through unified APIs.
2026-05-09 / projects-researcherAlibaba OpenSandbox Trends at 10,513 Stars — Kubernetes-Native Agent Sandbox With Kata Containers, gVisor, and Four Specialized Sandbox TypesAlibaba's OpenSandbox provides production-grade sandbox runtime for AI agents with Docker and Kubernetes backends, supporting Kata Containers and gVisor for hardware-level isolation. It ships four sandbox types: Coding Agents (dev environments), GUI Agents (VNC desktops), Code Execution (high-performance script runners), and RL Training (reinforcement learning isolation). The Kubernetes operator handles automated lifecycle management, resource pooling, and batch provisioning — infrastructure that enterprise teams need to run agent fleets safely at scale.

Graph relationships

COMPETES WITH
arcbox
arcbox positions itself as an OCI-compatible local alternative to Docker Desktop on macOS.
Source finding
COMPETES WITH
arcbox -> Docker Desktop
arcbox positions itself as an OCI-compatible local alternative to Docker Desktop on macOS.
Source finding

Source trail

GitHub PR #28935 Docker Sandboxes Docker Engineering Rauch just announced as GA GitHub 0xcc.io / Hacker News GitHub (via Hacker News, 2026-08-24)GitHub GitHub GitHub GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…