ArcBox

Overview

ArcBox is a container and VM runtime from arcboxlabs, currently at 3,300+ GitHub stars (+541/day on GitHub trending). Built entirely in Rust — its own VMM, VirtIO devices, filesystem sharing, and network datapath — it provides a single daemon that runs containers, microVM sandboxes, full Linux VMs, and macOS guests on macOS. The agent-relevant tier is the sandbox: disposable microVMs that boot in under 100 milliseconds with full kernel-level isolation.

Key Capabilities

The core value proposition for agent infrastructure is the sandbox tier. Traditional containers share the host kernel, which is fast but leaves a thinner security boundary. Full VMs provide strong isolation but take seconds to boot. ArcBox’s microVM approach gives you the isolation of a real VM — own kernel, own filesystem, own network stack — at container-like boot speeds. This matters for agent workflows where you need to execute untrusted code, run agent-generated shell commands, or provide computer-use environments that are truly disposable.

ArcBox also serves as a drop-in Docker replacement on macOS, so teams already using Docker get the agent sandbox capability without switching their container workflow. The abctl claude command spins up an isolated environment specifically for Claude Code sessions, and abctl sandbox provides the general-purpose disposable VM for any agent runtime.

The local-to-cloud parity is practical, not theoretical — the same sandbox definition runs on a developer’s laptop and on ArcBox Platform’s hosted fleet, so agent code that works locally deploys to production without changes.

Use Cases

• Running AI coding agents in isolated sandboxes where generated code cannot affect the host machine
• Providing computer-use environments for agents that need full OS access without security risk
• Teams replacing Docker Desktop with an open-source alternative that also provides agent sandboxing
• CI/CD pipelines that need disposable, fast-booting environments for agent-driven test and build steps