№ 0019GitHub
Muse Code Docker Sandbox kit
A Docker Sandboxes kit that runs Meta's Muse Code CLI in an isolated sandbox, allowing network access only to the Meta services needed for install, auth and model requests.
Muse Code Sandbox Kit
Docker Sandboxes kit for running Meta's Muse Code terminal coding agent inside an isolated sandbox.
The kit installs the official muse binary and permits only the Meta services needed for installation, updates, authentication, and model requests. Muse configuration, credentials, and sessions live under the sandbox user's persistent home directory.
Docker Sandbox kits are currently experimental and their schema and CLI may change.
Prerequisites
- The standalone
sbxCLI with kit-spec V2 support (Docker Sandboxes 0.38 or later) - Access to Muse Code (currently beta)
On macOS, install sbx from Docker's Homebrew tap and sign in:
brew trust docker/tap
brew install docker/tap/sbx
sbx login
On Ubuntu, install it from Docker's apt repository:
curl -fsSL https://get.docker.com | sudo REPO_ONLY=1 sh
sudo apt-get install docker-sbx
sudo usermod -aG kvm "$USER"
newgrp kvm
sbx login
See Docker's Get started with Docker Sandboxes page for supported operating systems, hardware requirements, Windows installation, and manual downloads.
Quick start
Run the published kit directly from Docker Hub:
sbx run --kit docker.io/olegselajev241/muse-code-sbx-kit:latest muse-code .
Docker Hub is an allowed kit source by default. To run the kit directly from GitHub instead, allow this repository as a source once:
sbx settings set kit.allowedSources '["docker.io/", "github.com/shelajev/"]'
sbx run --kit git+https://github.com/shelajev/muse-code-sbx-kit.git muse-code .
On first use, Muse asks you to sign in. Follow the URL it prints in your terminal and finish authentication in your local browser. The resulting ~/.config/muse/auth.json remains in the sandbox's persistent home directory.
Muse also supports API-key authentication through META_API_KEY. Do not place a key in spec.yaml or commit it to this repository.
Named sandbox
Create a sandbox that you can reattach to later:
sbx create --name muse-current \
--kit docker.io/olegselajev241/muse-code-sbx-kit:latest muse-code .
sbx run muse-current
When working from a local clone, the wrapper uses the local kit directory:
./run.sh muse-current
