NVIDIA Just Built a Sandbox That Knows When to Say No (Openshell)
Better Stack
Oct 28, 2026 14:00
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Create an account to hide videos, mark them watched, or save them to Don't Miss.
Chapters
Is Docker enough to keep AI coding agents secure? NVIDIA's OpenShell is a new open-source AI agent sandbox that goes beyond traditional Docker containers, giving control over what agents like Claude Code, Codex, and OpenCode can actually do.
In this video, I test NVIDIA OpenShell on a Mac, walk through its installation and security policies, and demonstrate how it blocks unauthorized file access, network connections, and GitHub API requests while allowing approved actions.
🔗 Relevant Links
Openshell Repo - https://github.com/NVIDIA/OpenShell
Openshell Docs - https://docs.nvidia.com/openshell/latest/
❤️ More about us
Radically better observability stack: https://betterstack.com/
Written tutorials: https://betterstack.com/community/
Example projects: https://github.com/BetterStackHQ
📱 Socials
Twitter: https://twitter.com/betterstackhq
Instagram: https://www.instagram.com/betterstackhq/
TikTok: https://www.tiktok.com/@betterstack
LinkedIn: https://www.linkedin.com/company/betterstack
📌 Chapters:
Science & Technology
#NVIDIA OpenShell
#OpenShell
#NVIDIA OpenShell tutorial
#OpenShell sandbox
#NVIDIA AI sandbox
#AI agent sandbox
#AI coding agents
#Docker AI agents
#Docker sandbox
#Docker vs OpenShell
#Claude Code sandbox
#Claude Code security
#Codex sandbox
#OpenCode sandbox
#AI agent security
#secure AI agents
#AI agent isolation
#AI agent permissions
#API key protection
#network policy enforcement
#default deny security
#agentic AI security
#OpenShell on Mac
#AI agent runtime