Microsoft's Quicksand Sandboxes AI Agents Without Root Privileges or Docker
Summary
Microsoft publishes Quicksand, an async Python API that launches, controls, and snapshots QEMU virtual machines to sandbox AI agents. The tool ships pre-built Ubuntu 24.04 and Alpine 3.23 images for x86_64 and ARM64, and runs without root privileges or Docker. The repository carries an MIT license.
Key Points
- Microsoft's documentation states sandboxes run network-isolated by default, and developers opt into internet access through NetworkMode.FULL.
- The repository shows 126 stars, 13 forks, 314 commits, latest merge dated September 24, 2026.
- Microsoft says the ubuntu-desktop image bundles Xfce4 plus Firefox, enabling screenshot, typing, mouse control methods.