Docker is containerizing the AI AGENT itself now. Its new open-source Kits package: - Agent - Tools - Credentials - Network permissions - Environment Then ship the whole thing as an OCI artifact and run it in an isolated microVM. This feels like a VERY important infrastructure layer for agents. 👇

Dockerized REST API for Signal Messenger, wrapping signal-cli with four execution modes to balance request speed against memory usage. - Send messages, attachments, and manage groups via REST endpoints - Register, verify, and link Signal numbers through a simple API - Modes: normal, native, json-rpc, and json-rpc-native for latency tuning - Persist configuration in a mounted volume for easy container updates Explore it here:

Shabbat Shalom. @Docker has issued a critical level (!!) CVE-2026-77179, reported by @Accomplish_ai researcher @orenyomtov. If you use Docker Sandboxes, run sbx --version. Make sure you’re running 0.42.0 or later. If you use Docker Desktop, you want 4.88.0 or later Docker Desktop and Docker Sandboxes are both affected. Docker Desktop is only affected if Docker VMM is turned on in Settings. It’s a good thing we found it now, because Docker VMM is scheduled to become the default for Docker Desktop at the end of October 2026! The escape is in Docker's hypervisor for Mac: a container gets complete read and write access to the host filesystem. Read the full details of this escape in our blog:

Found a solid Docker management panel for multi-VPS / NAS users: Dockhand. It unifies containers, Compose stacks, logs, and updates from different machines into one web dashboard. Built-in Trivy / Grype vulnerability scanning — checks images before updating to reduce risk. Free version already supports multi-host, OIDC/MFA, Git deploy, external secrets, and backups. If Portainer feels a bit heavy, this is worth a look. 👉