docker/sbx-kit-gstack-mixin

Verified Publisher

By Docker, Inc.

•Updated 3 days ago

Garry Tan's Claude Code skill pack as a mixin — the gstack checkout at a pinned commit with its...

Sandbox Kit

Overview Tags

docker/sbx-kit-gstack-mixin repository overview

Tag

Digest

sha256:d372693c06e4…

Size

1001.3 MB

Schema

Pushed

3 days ago

Specificationspec.yaml

MIXIN

Garry Tan's Claude Code skill pack as a mixin — the gstack checkout at a pinned commit with its setup run, Bun, and the headless-Chromium browse bundle, in an overlay. Layer it onto a shell base that already carries Claude Code and run `claude`.

Arguments

Name	Required	Default	Description
`bunVersion`	Optional	`1.3.10`	Bun release the gstack binaries are built with
`ref`	Optional	`a5833c413f98b13f105beac96262e8098b628461`	gstack commit to check out and run ./setup from
`version`	Optional	`1.57.10.0`	gstack's own VERSION at the pinned ref; the build verifies it matches

Provides[email protected]

CapabilitiesExpand a row to see its full configuration. See the full spec for the complete descriptor.

Type	Required	Description
`com.docker.sandbox/network-policy@1`	Required	—

`com.docker.sandbox/credential@1`	Optional	Anthropic API access (API key or claude.ai OAuth)

`com.docker.sandbox/agent-context@1`	Required	—

Requiresclaude

Apply this mixin to a sandbox

sbx run <agent> --kit docker/sbx-kit-gstack-mixin:latest

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS

brew install docker/tap/sbx

Windows

winget install Docker.sbx

Learn more about docker sbx⁠

Note
Experimental: Sandbox Kit v3
This kit uses the experimental Sandbox Kit specification⁠, specifically v3⁠. The format and runtime behavior may change before v3 is stable.

⁠gstack-mixin

gstack⁠ — Garry Tan's Claude Code skill pack — as a kind: mixin kit: an overlay you layer onto a base that already carries Claude Code, rather than a sandbox image of its own. The workload form is ../gstack⁠.

⁠Compose it

sbx create --kit docker.io/dockerdev/sbx-kit-claude --kit ./gstack-mixin
sbx exec <sandbox> -- claude

This kit declares requires: ["claude"]: the pack drives Claude Code and has nothing to do without it, so a composition with no claude provider is refused up front rather than failing at the first slash command.

Composing this kit and ../gstack is refused as well: both provide gstack, and one capability name has one owner.

⁠What it carries

The gstack checkout at the pinned commit with ./setup already run (every slash command registered under ~/.claude/skills), Bun at /usr/local/bin/bun, the Playwright Chromium bundle at /opt/playwright-browsers, the fonts the browse daemon renders with, and the anthropic credential plus the egress policy the pack needs.

⁠What it leaves to the base

The launch command. The mixin sets no ENTRYPOINT; run claude yourself.
Claude Code itself. Declared through requires, not installed here.
Chromium's system libraries. playwright install --with-deps apt-installs shared libraries that are ABI-coupled to the distribution they came from, so the overlay does not carry them — see the comment in gstack-mixin.dockerfile⁠. /browse works on an Ubuntu sandbox template and fails closed elsewhere; every other command is unaffected.
The context-file profile. agent-context@1's filename is workload-only, so this kit contributes a body and the base decides which file the agent reads.