hossie@hossie.de Daniel Augustin Install the AppArmor profile that lets the nerdbox shim create user namespaces https://docs.docker.com/ai/sandboxes/ docker/sbx-releases Docker Sandboxes (sbx) runs AI coding agents such as Claude Code, Codex or Gemini CLI inside isolated KVM microVM sandboxes with their own container runtime, network policy and credential proxy.