$ sbx create shell --name m101-secret

sandbox    m101-secret
agent      shell
workspace  none · no workspace bind mount
image      docker/sandbox-templates:shell-docker
cpu        10
memory     32 GiB

Pulling image
  <layers>
✓ Image ready
✓ Created sandbox m101-secret

To connect to this sandbox, run:
  sbx run --name m101-secret
[exit 0]

$ sbx policy allow network --sandbox m101-secret localhost:18080
Rule added to policy local (scope: sandbox:m101-secret): <uuid> (localhost:18080 [tcp])
[exit 0]