Nightly build @2d499a8

Note

Nightly build from main — 2026-04-12 (2d499a8a45c7b70f8ebc5010b0aea4c32bd16f36)

Installation

macOS (Homebrew)

brew install docker/tap/ds@nightly

Windows

Download the .msi file below and double-click to install or
use the command line:

msiexec /i DockerSandboxes.msi /quiet

Ubuntu

Download the .deb file for your Ubuntu version below, then:

sudo apt install ./DockerSandboxes-linux-amd64-ubuntu2404.deb  # Ubuntu 24.04
sudo apt install ./DockerSandboxes-linux-amd64-ubuntu2510.deb  # Ubuntu 25.10
sudo apt install ./DockerSandboxes-linux-amd64-ubuntu2604.deb  # Ubuntu 26.04

Rocky Linux 8

Download DockerSandboxes-linux-amd64-rockylinux8.rpm below, then:

sudo dnf install ./DockerSandboxes-linux-amd64-rockylinux8.rpm

v0.24.2

Highlights

This patch release brings a revamped TUI experience with a new sandbox info dialog, improved notifications, and better error visibility when the daemon becomes unreachable. It also includes several CLI stability fixes including proper terminal restoration after agent crashes, correct -- separator handling in exec, and graceful handling of invalid sandbox names.

What's New

CLI & TUI

• Add sandbox info dialog for viewing sandbox details (#2130)
• Show explanatory action when creating a new sandbox (#2128)
• Improve TUI notification system with better styling and behavior (#2123)
• Show error in TUI when daemon becomes unreachable (#2195)
• Bypass login check and network policy setup when running "reset" (#2067)

Bug Fixes

• Strip leading -- separator in exec command args (#2057)
• Use full terminal reset after agent crash to restore terminal state (#2187)
• Gracefully handle invalid/duplicate sandbox names in the TUI and CLI (#2121)
• Use --disable-interactivity flag for Windows winget to avoid interactive prompt (#2180)

v0.24.1

Highlights

This patch release improves the TUI interaction experience with nicer confirmation dialogs and better support for long network hostnames. It also fixes a network creation race condition in the daemon and expands packaging support for newer Ubuntu versions.

What's New

CLI

• Style confirmation dialogs as buttons with full mouse click support and keyboard navigation (#2163)
• Add horizontal scrolling for long hostnames and rule values in expanded network detail views (#2131)

Packaging

• Add Ubuntu 25.10 and 26.04 deb package builds (#2140)

Bug Fixes

• Retry network creation on stale network conflict in daemon (#2142)

v0.23.0

Highlights

This release brings OpenAI OAuth support for Codex sandboxes, allowing users to authenticate via OAuth flow instead of API keys. It also improves session lifecycle management with auto-stop on disconnect — sessions now track active connections via reference counting and automatically stop when all agents and exec sessions have disconnected (detached sandboxes are unaffected).

What's New

Agents

• Add OpenAI OAuth flow for Codex sandboxes, including --oauth-login flag for create/run commands (#2063)

Daemon

• Auto-stop sessions when the agent has been disconnected using reference counting; detached sandboxes are excluded (#2095)

Documentation

• Add AGENTS.md for standalone distribution pipeline overview (#2120)

v0.21.0

Highlights

This release brings network policy improvements including rule deduplication and default policy selection during sandbox creation. Linux packaging is now available as a standalone binary, and the TUI gets consistent styling, animations, and better terminal support (including Warp). Worktree handling is enhanced with the new --branch flag for multiple worktrees, and several proxy and credential fixes improve reliability across agents.

What's New

Policy & Networking

• Deduplicate network domain rules and create one rule per domain (#2025)
• Add default network policy selection during sandbox creation (#1903)
• Add policy reset command to restore default policies (#1848)
• Add dl-cdn.alpinelinux.org:443 to balanced preset (#1927)
• Remove *.googleapis.com wildcard from service detector (#1999)
• Remove codex allowedDomains leaking into all sandboxes (#2011)
• Skip CIDR check for allowed domain hosts in governance engine (#1860)
• Point SSL_CERT_FILE, NODE_EXTRA_CA_CERTS, REQUESTS_CA_BUNDLE at full CA bundle (#1883)

CLI

• Add rm --all to remove all sandboxes (#1947)
• Add reset --preserve-credentials and rename to --preserve-secrets (#1960, #1986)
• Improve sbx CLI UX — policy selector, policy ls, and spacing (#1946)
• Return exit code 127 for missing binary in sbx exec (#1911)
• Prevent sandbox reuse when directories share the same basename (#1973)
• Prevent double policy prompt on policy reset after sign-out (#1998)
• Handle Ctrl+Z to suspend sbx process (#1676)
• Allow non-release versions to be compatible with each other (#2041)

Worktrees

• Support multiple worktrees in a sandbox using --branch flag (#1857)
• Use branch name as worktree (#2023)

TUI

• More consistent TUI styling (#1970)
• Add reusable dialog open/close/resize animations (#1918)
• Better support for Warp terminal and refactored terminal spawn logic (#1898)
• Fix mouse hitboxes in credential creation dialog (#1884)
• Set NoWorktree as default in TUI (#1882)
• Terminal cleanup (#1971)

Sandbox & Daemon

• Support configurable Docker volume size via env-var for DinD (#1834)
• Expose internal error details in API error responses (#2040)
• Support dots in sandbox names by sanitizing Docker network names (#1972)
• Generic OAuth for blueprint agents (#1809)
• Silence spurious warning when setting secret with daemon stopped (#1902)