Sign inSign up

sbx/gemini-kit

Verified Publisher

By Docker, Inc

•Updated 3 days ago

Google Gemini CLI. Deprecated in favour of the antigravity kit.

Sandbox Kit
0

85

sbx/gemini-kit repository overview

Base Imagedocker.io/sbx/gemini-image:latest
Digest

sha256:0211aaef5957…

Size

2 Bytes

Schema

v2

Pushed

3 days ago

Specificationspec.yaml
SANDBOX KIT
REQUIRES SECRETS

Google Gemini CLI. Deprecated in favour of the antigravity kit.

Credentials
NameServiceRequiredDescription
GEMINI_API_KEYgoogleOptionalGemini API key
Network Egress

accounts.google.com

aiplatform.googleapis.com

generativelanguage.googleapis.com

oauth2.googleapis.com

vertexai.googleapis.com

Run in a sandbox

sbx run sbx/gemini-kit:latest

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠

⁠Gemini CLI

Deprecated. Gemini CLI is deprecated in favour of Google Antigravity. This kit exists so sbx run gemini keeps working. For new sandboxes use the antigravity⁠ kit. It uses the same google credential, so sbx secret set google carries over.

A standalone Docker Sandboxes kit for Gemini CLI⁠. It runs gemini --yolo in the sandbox.

⁠Usage

Use the published kit:

sbx run --kit "docker.io/sbx/gemini-kit:latest" gemini

Or load it directly from this repository:

sbx run --kit "git+https://github.com/docker/sbx-kits-contrib.git#dir=gemini" gemini

Or use a local clone:

sbx run --kit ./gemini/ gemini

⁠Authentication

Either sign in with Google when Gemini CLI asks, or store a Gemini API key before launching:

sbx secret set google
sbx run --kit "docker.io/sbx/gemini-kit:latest" gemini

The kit exposes GEMINI_API_KEY as a proxy sentinel and injects the real key as x-goog-api-key on requests to aiplatform.googleapis.com, generativelanguage.googleapis.com, oauth2.googleapis.com and vertexai.googleapis.com.

⁠Settings and MCP gateway

The image ships a baseline ~/.gemini/settings.json with tools.sandbox: false, security.disableYoloMode: false, security.folderTrust.enabled: false and ui.useFullWidth: true.

When Docker Sandboxes provides an MCP gateway, the kit adds it to that file as mcpServers.mcp-gateway (httpUrl, with the proxy-managed bearer sentinel). Other settings and MCP servers are preserved.

⁠Versions and publishing

The kit does not pin the Gemini CLI version. The image installs @google/gemini-cli@latest from npm at build time and is rebuilt nightly, so the kit version is a release number, not a content identity.

The kit and image are rebuilt nightly until the Gemini CLI deprecation window ends. After that the rebuilds stop and the last published tag stays in place.