Docker introduces MicroVM sandbox supporting Windows, macOS and Linux with integrated policy engine

Docker has released a MicroVM sandbox that runs on Windows, macOS and Linux. The sandbox isolates workloads at the virtual machine level. It incorporates a built‑in policy engine to enforce security rules. Users can define policies that control resource access and network behavior. The solution aims to provide lightweight isolation for containerized applications. Compatibility across the three major operating systems broadens its applicability. Documentation outlines setup steps and policy configuration. The feature is positioned as a tool for developers seeking stronger security guarantees.