I've been working on something similar.

https://github.com/coventry/sandbox-codex

Still work in progress. The tmux-activity logs are unreadable, at the moment.

I run it in a virtualbox as well, since docker is not a completely reliable sandbox.