Did you look at Docker sbx https://docs.docker.com/reference/cli/sbx/ ?

Docker Sandboxes run AI coding agents in isolated microVM sandboxes. Each sandbox gets its own Docker daemon, filesystem, and network ~ the agent can build containers, install packages, and modify files without touching your host system.