Linux 5m Build a Sandboxed AI Agent on Ubuntu Using Docker Run an AI agent in a locked-down Docker container on Ubuntu: read-only root, dropped capabilities, no network by default, and narrow mounts.