I wanted to learn how to use Docker’s new sandbox feature to deploy an AI RAG agent. The docs cover mostly “coding” agents — Claude Code, Codex, that kind of thing. Not “here’s how to package your own agent idea into a sandbox.”

So I did what I always do.

The Workflow

Step 1: Get ideas. I had one: deploy a RAG agent inside a Docker sandbox.

Step 2: Deep research. I fired up 12 different chatbots and asked them all the same question from different angles. What’s the sandbox architecture? What are the isolation layers? How does credential proxying work? What’s the network model?

Step 3: Feed into a deep research agent. All those responses get compiled into a comprehensive report.

Step 4: Publish. That report becomes a blog post. Now I have a reference I can actually use.

Step 5: Read my own report. I know what Docker Sandboxes can do. Now I need to figure out how to make it do what I want.

Step 6: Feed it to a coding agent. I gave my coding agent the sandbox docs, the tech stack I wanted (Pydantic AI, Qdrant, RustFS, Langfuse, Ollama), and the type of agent I wanted to build. No “find me a tutorial.” Just “here’s the context, build this.”

Step 7: Iterate. A few rounds of coding, reviewing, fixing.

The result: a RAG agent running inside a Docker sandbox that ingests GxP SOPs from S3 storage, generates embeddings with a local model, vectorizes them into Qdrant, and answers compliance questions through a Pydantic AI agent. All containerized. All isolated.

Running docker commands to build and launch the RAG agent sandbox

Here’s the stack in action:

RustFS S3 object storage holding GxP documents

Qdrant vector database with document embeddings indexed

Langfuse observability traces showing agent execution

No More One-Size-Fits-All Tutorials

I no longer need to find a tutorial that matches my exact setup. There is no tutorial for “Pydantic AI RAG agent with Qdrant and RustFS running inside a Docker sandbox with Langfuse observability.” That tutorial doesn’t exist. It never will.

But my coding agent can generate the exact code example for my exact need. I give it the docs, the constraints, the architecture I want — and it builds it. The GitHub repo has the full working code: Dockerfile, docker-compose, API endpoints, vector ingestion scripts, everything.

The sbx TUI dashboard showing the running RAG agent sandbox

A Few Thoughts

AI is a tool. Use it like one. If you think “AI is now doing the fun part (coding) and I’m stuck doing the boring part (checking errors, testing),” you’re going to have a bad time. Reframe it: your new tool does 80% of the work. Use the time you freed up to improve the remaining 20%. That’s where the real leverage is.

Not everyone can do this today. I watch coding agents churn out code and the sheer number of things I need to spot-check or validate — it’s a lot. I’m not sure people without programming experience can pull this off right now. It takes domain knowledge to know when the agent is wrong. Smart kids might figure it out, but starting with AI without any hand-coding experience is a real gap.

Does AI level the playing field or widen it? I can’t find the article right now, but there was a blog post analyzing Terence Tao’s ChatGPT prompts. The bottom line: the more domain knowledge you have, the better your prompt will be. Better prompt, better result. AI might be an equalizer for people who already know what they’re doing. For everyone else, it’s a black box that sometimes gives you garbage and you don’t know which is which.

The gap isn’t access to AI. Everyone has access. The gap is knowing what to ask and knowing when the answer is wrong.