Agentbox CLI
A Docker sandbox for coding agents: a Debian image with Copilot CLI, Codex and Pi, and SSH, RDP and Docker enabled by flags.
- 154 ★ on the repository
- Last commit
Extended access
Why this level
- Docker inside the container needs privileged mode, which weakens isolation.
- Default SSH and RDP passwords are weak.
Install
- Works in
Manual install
docker build -t agentbox .Run it in the repository clone. The desktop image builds with `docker build -t agentbox:gui --target gui .`.
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- Docker inside the container needs privileged mode, which weakens isolation.
- Default SSH and RDP passwords are weak.
This is third-party code. Review the repository files before installing.
What it does
Agentbox builds a Debian Stable image with Copilot CLI, Codex and Pi preinstalled, plus `gh`, Nushell, `lazygit`, Homebrew, `uv` and Bun. Agents run inside the container and leave the host alone. Optional `toad`, `opencode`, `gemini` and `vibe` install with `make -C ~ ...` commands. Services are off by default: `ENABLE_DOCKER`, `ENABLE_SSH` and `ENABLE_RDP` enable Docker inside the container, SSH and a remote desktop. The `gui` tag adds XFCE, XRDP and VS Code. `/home/agent/workspace-skel` holds a workspace skeleton with skills and instructions, and `make init-workspace` copies it without overwriting files.
Who it is for. Developers who run several agents and want them in a container instead of the main system.
Good fit when
- An agent must edit code and run commands without access to the home folder.
- Several sessions run in parallel and each needs its own clean container.
- A desktop with VS Code over RDP is needed for tasks where the agent requires graphics.
- A new project folder should be filled with ready skills and agent instructions.
Not a fit when
- Strict isolation is required, since containers are described as a practical start and not full protection.
- The project needs network isolation, which is on the roadmap and not implemented.
- Docker is unavailable on the machine.
Example request
Build the Agentbox image, start a container with the project folder at `/workspace` and open Codex in it without enabling SSH or RDP.Limitations
The image builds from the `Dockerfile`, and the README lists no prebuilt image. Docker inside the container needs privileged mode, which weakens isolation. Default passwords are weak, so change them or use keys for SSH and RDP. Claude Code is not included, so install it yourself. Network isolation does not exist yet and sits on the roadmap. CPU and memory limits use ordinary Docker constraints. For several sessions the author suggests pairing it with `webterm`. The latest commit is dated October 2026.
How to disable. Stop and remove the container with `make down` or `docker rm -f agentbox`, then delete the image. Project data stays in the mounted `/workspace` folder.
FAQ
Which agents are already inside?
Copilot CLI, Codex and Pi. Optional `toad`, `opencode`, `gemini` and `vibe` are added with `make -C ~ <name>`.
How do I enable SSH?
Start the container with `-e ENABLE_SSH=true -p 22:22`. All services are off by default.
Is privileged mode needed?
Only for Docker inside the container. Without it Docker-in-Docker is unavailable, but isolation is better.
Is there an image with a desktop?
Yes, the `gui` tag adds XFCE, XRDP and VS Code. It builds with `docker build -t agentbox:gui --target gui .`.
What does the project skeleton contain?
`/home/agent/workspace-skel` holds instructions and skills for Python, Go, Bun, Docker and GitHub Actions. `make init-workspace` copies them without overwriting files.
Discussion
No questions or reviews yet.
Related
CLI toolsAgentBox runs Claude Code, Codex and Open Code in separate virtual machines on your PC, a self-hosted server or a cloud.
Containarium: isolated boxes for AI agents
Containarium
A platform on your own server that gives each agent its own Linux box with SSH and MCP tools for commands and files
Container by Aerovato
Container
A CLI for persistent per-project Linux workspaces in Docker or Podman that keep the agent away from the rest of your system
A self-hosted control center for coding agents: Claude Code, Codex, Copilot, OpenCode and Pi from your phone, desktop and terminal
Agent of Empires
Agent of Empires (AoE)
A session manager for coding agents: runs Claude Code, OpenCode, Codex and other CLIs in parallel, isolated tmux sessions with a TUI and web dashboard
Docker’s terminal client connects agent commands to containers, images, networks and volumes in the selected environment.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| Agentbox (this card) | no | 154 | ||
| AgentBox | no | 570 | runs agents in separate virtual machines; this one is a plain Debian Docker container | |
| Agent-Sandbox | no | key is optional | 230 | a Kubernetes sandbox with a REST API and MCP; this is a local container with no cluster |
README in short
The image is meant to work with `webterm` for several agent sessions. MIT license.