Several sandbox feature guides omit supported tasks or describe them
inaccurately. This change fills those gaps in the documentation for
released Sandboxes v0.47.0 and organizes the additions around the tasks
readers need to complete.
- MCP: document DHI registration after the other server inputs, make
OAuth client changes a focused maintenance task, and place resource
overrides after normal OAuth setup.
- Environment files: consolidate file placement and write protection
after the first setup example, and explain plan output before listing
its symbols.
- Cloud: separate saving and reusing templates, importing local
templates, and customizing with kits. Explain capture modes beside the
relevant operations.
- Skills: correct import precedence, include OpenCode, and explain
skipped linked dependencies after the import command.
- Kits v2: correct the downloaded archive formats in the command entry
and put provenance inspection with signing and verification. Omit OCI
storage details that don't help complete these tasks.
Behavior was checked against the v0.47.0 source. In particular,
replacing an OAuth client secret does not clear its previous identity
binding; the recovery task retains the required reset and tells readers
to verify the intended client and provider first.
Validation: scoped Markdown and Vale lint passed, the full Hugo
development build passed, and checks of the five rendered guides
confirmed complete code blocks, visible placeholders, plan indentation,
valid same-page anchors, skills import order, and the revised task
headings. Changes are committed separately by issue. The v0.48 migration
remains in #26314.
```release-note
NONE
```
---------
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
## Summary
The v2 kit reference says that adding a kit with startup commands
requires removing and recreating the sandbox. Document support for
startup commands through `sbx kit add` and explain when they run.
Implementation:
[docker/sandboxes#6886](https://github.com/docker/sandboxes/pull/6886).
Checked against the `release/v0.48` source and its regression coverage.
Changed Markdown passes rumdl and Vale.
For [Sandboxes
v0.48.0](https://github.com/docker/sandboxes/issues/7014); kept in draft
for the upcoming release.
@netlify /ai/sandboxes/customize/kits-v2/
Generated by Codex
Add a kit capability support reference showing local and cloud
availability, minimum `sbx` versions, capability-group behavior, and
restrictions on `sbx kit add`. Link it from the authoring overview and
clarify that v3 kits must request SSH-agent forwarding. Keep capability
definitions and examples in the upstream specification.
Validation: Markdown and style checks pass; upstream capability links
verified.
Generated by Codex.
Document the Windows SSH-agent fallback under `ssh.agentSocketPath`,
including what happens when both the setting and `SSH_AUTH_SOCK` are
unset. Keep the general SSH-agent guide focused on setup and linked to
the settings reference.
Validation: Markdown and style checks pass.
Generated by Codex.
Document how to select a model reasoning level with `sbx run --variant`,
with an example and the relevant agent limitations.
Validation: Markdown and style checks pass.
Generated by Codex.
Document desktop app connections that create a sandbox on first use and
reuse it on later connections. Keep the shared setup and lifecycle
behavior on the integrations overview, with brief links from the ChatGPT
and Claude Desktop pages.
Validation: Markdown and style checks pass.
Generated by Codex.
Document using stored API keys for hosted and custom model providers.
Explain how the host proxy supplies the key to the model service and
make clear that selecting a provider does not restrict the key to that
provider's endpoint. Clarify the environment-variable fallback.
Validation: Markdown and style checks pass.
Generated by Codex.
Document expiration settings for cloud moves and environments, including
automatic restart at expiration. Organize the cloud environment guidance
into task sections covering setup, supported settings, expiration,
credentials, reuse, removal, and recovery.
Validation: Markdown and style checks pass.
Generated by Codex.
## Summary
Kit authors can use `SBX_AGENT` to choose setup behavior for the
provisioned agent. Document the value for built-in and custom agents,
and how install hooks request the variable.
Implementation:
[docker/sandboxes#6876](https://github.com/docker/sandboxes/pull/6876).
Checked against the `release/v0.48` source and its regression coverage.
Changed Markdown passes rumdl and Vale.
For [Sandboxes
v0.48.0](https://github.com/docker/sandboxes/issues/7014); kept in draft
for the upcoming release.
@netlify
/ai/sandboxes/customize/author/#pass-environment-variables-to-hooks
Generated by Codex
## Summary
The build policy docs covered HTTP downloads through `ADD` but did not
explain how to block URLs requested by `RUN` steps. Add a tested
allowlist example using `"caps": {"exec.proxy": true}` in the policy
file and update the HTTP input reference, with a brief builder flag
example for CI.
Verified that Debian package downloads pass and the blocked URL returns
HTTP 403 and fails the build. Scoped Markdown and Vale checks passed,
with one existing Vale warning on unchanged text.
@netlify /build/policies/usage/
Generated by Codex
## Summary
Removes files left over from earlier agent tooling that nothing
references anymore, and moves the `curate-whats-new` examples next to
the skill that uses them.
- Delete `tech_writer.yml` and `docs_engineer.yml`, unused docker-agent
configs, and the `.validation.log` ignore entry that only they wrote.
- Delete `.github/prompts/`, unreferenced Copilot prompt files that link
to a nonexistent style guide.
- Move `.github/agents/whats-new-examples/` to
`.agents/skills/curate-whats-new/examples/`.
`.github/agents/docs-scanner.yaml` and the `docker-agent-action`
workflows stay, since CI still uses them.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>
## Summary
Remove experimental badges and notices for the Cloud Sandboxes CLI, API,
and SDK, including the API reference card and CLI release notes.
Preserve the Docker Agentic Platform experimental status, the
subscription requirement, and feature-specific experimental warnings.
@netlify /ai/sandboxes/cloud/
Generated by Codex
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
<!--Delete sections as needed -->
## Description
<!-- Tell us what you did and why -->
## Related issues or tickets
<!-- Related issues, pull requests, or Jira tickets -->
## Reviews
<!-- Notes for reviewers here -->
<!-- List applicable reviews (optionally @tag reviewers) -->
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
---------
Signed-off-by: aevesdocker <allie.sadler@docker.com>
## Summary
Gordon's Supplemental Terms are no longer in effect. Replace the
reference under Questions about privacy with a link to the Docker
Subscription Service Agreement.
@netlify /ai/gordon/concepts/data-privacy/
Generated by Codex
Closes#26138
The `get` example under Extensions SDK backend API is missing its
closing parenthesis, so copying it into an extension gives a syntax
error before anything runs:
```typescript
ddClient.extension.vm.service
.get("/some/service")
.then((value: any) => console.log(value)
```
Every other example on the same page closes with `console.log(value));`,
so this matches that rather than only adding the bracket.
## Description
Fix formatting and grammar in the `windowsfilter` storage driver
documentation:
- Code-format the `windowsfilter` driver name for consistency with other
inline code (`size`, `image`, subdirectory names) in the same page
- Fix the double negative "no configuring the windowsfilter storage
driver is not necessary"
- Fix the typo "to for storing"
- Use a space between the number and unit for the default storage limit
(127 GB), per `STYLE.md`
## Related issues or tickets
None.
## Reviews
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
## Summary
**Problem:** Mermaid diagrams briefly showed their raw source before the
SVG appeared, stayed on the wrong palette after a light/dark theme
toggle, and could leave Mermaid's error graphic in the page when a
diagram failed to parse.
**Why this change:** Diagrams are used more often in the docs, so the
renderer needs to match the site theme and avoid flashing source text
while SVGs load.
**Solution:** Replace `mermaid.run()` with a controlled
`mermaid.render()` loop that caches each block's source, skips stale
async results, re-renders when the `<html>` dark class changes,
suppresses Mermaid's default error SVG, and hides `pre.mermaid` until an
SVG is present (or a render error sets `data-error` so the source can
still be inspected).
@netlify /get-started/docker-concepts/the-basics/what-is-a-registry/
Preview:
https://deploy-preview-26304--docsdocker.netlify.app/get-started/docker-concepts/the-basics/what-is-a-registry/
Example of pre-fix behavior:
https://deploy-preview-26283--docsdocker.netlify.app/accounts/organization/
Generated by Cursor
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
Monitoring guides were grouped under CI/CD, and several other guides had
categories that did not match their main purpose. Add Observability,
rename Deployment to Services & infrastructure, and move LocalStack and
Django into Testing and Languages & frameworks.
Remove the E2B workflow and integration documentation and both Ollama
application guides. Remove E2B navigation and promotional links.
Redirect former E2B URLs to Docker Sandboxes and former Ollama guide URLs
to Docker Model Runner.
The Build Cloud, Compose, Scout, Testcontainers Cloud, and
container-supported development guides mostly repeat product benefits
and introduce videos instead of teaching distinct tasks.
Remove these five guides and their unused images, update incoming links,
and redirect all former page and chapter URLs to the relevant product
docs or hands-on lab. Keep both administration guides.
The Testcontainers collection includes nine specialized Java integration
tutorials with modest readership and overlapping framework setup.
Remove these guides and their links from the Testcontainers overview,
retaining eleven guides covering language introductions, general
techniques, representative web frameworks, and Testcontainers Cloud.
The NLP examples, TensorFlow.js face detection guide, Neo4j RAG guide,
and video chatbot guide have low readership and repeat application
setup or containerization covered by other guides.
Remove these eight guides and the nine images used only by them.
No remaining content or config entries reference the removed guides.
With the nydus, overlaybd, soci, or stargz snapshotter, docker pull
skips the content of layers that the snapshotter provides. If that
content isn't already stored locally, docker save fails for the image,
and docker push can fail too.
Add a "Lazy pulling" section that explains this default, which layers
it skips, and its limits. It notes that the default needs no
configuration, and that setting the lazy-pull feature overrides it.
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
## Description
Add Offload shortcuts for the product page, billing catalog, and
documentation:
- `/go/offload` redirects to
https://www.docker.com/products/docker-offload/.
- `/go/get-offload` redirects to https://app.docker.com/billing/catalog.
- `/go/cloud-flag/` redirects to https://docs.docker.com/offload/.
## Related issues or tickets
DCL-2119
## Reviews
Validated with all nine existing redirect-handler tests and `git diff
--check`. All three shortcuts accept URLs with or without a trailing
slash. The product and documentation pages return HTTP 200; the billing
catalog redirects unauthenticated visitors to login with the catalog as
the return destination.
- [ ] Technical review
- [ ] Editorial review
- [ ] Product review
The API reference banner kept its light background when links switched to light colors in dark mode. Add dark background, border, and text colors matching the note callout palette.
## Description
Documents the user-facing changes in Docker Sandboxes v0.47.0 and
updates the CLI reference.
- `sbx run --rm` removes the sandbox when the agent exits, for local and
cloud sandboxes.
- `sbx run --detached` keeps a local sandbox running after its sessions
end.
- Kits can declare the `long-running@1` capability to keep their sandbox
running.
- `sbx move` to the cloud applies the kit's network rules.
- MCP authorization requests `offline_access` with default scopes, so
servers can issue refresh tokens.
- UDP to local-network destinations is blocked regardless of network
policy.
- `sbx --cloud ttl` reports stopped sandboxes as stopped instead of
expired.
- The CLI reference is updated for v0.47.0.
@netlify /ai/sandboxes/usage/
🤖 Generated with [Claude Code](https://claude.com/claude-code)
---------
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
David Karlsson
Mark HandClaude Opus 5.5
Alexa KristensenandCursor
Craig Osterhout
Allie Sadler
Paweł Gronowski
Sweta Sahoo
mrchatam
Lucas Pimentel
docker-tools-robot
Nicolas Beck
agent