diff --git a/Dockerfile b/Dockerfile
index c739262..77a5778 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,6 +9,9 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 # Install additional system packages (base image already includes git, curl, sudo, etc.)
 RUN apt-get update && apt-get install -y --no-install-recommends \
+  # Sandboxing support for Claude Code
+  bubblewrap \
+  socat \
   # Modern CLI tools
   fzf \
   ripgrep \