From 369b39536107efef5ae5056575ef85e058c08645 Mon Sep 17 00:00:00 2001 From: Dan Guido Date: Fri, 30 Jan 2026 19:19:14 -0500 Subject: [PATCH] Add bubblewrap and socat for Claude Code sandboxing (#9) These packages are required for Claude Code's native sandboxing on Linux: - bubblewrap: Provides filesystem isolation via Linux namespaces - socat: Enables the network proxy for domain filtering Without these, the /sandbox command shows installation instructions instead of enabling sandbox mode. Ref: https://code.claude.com/docs/en/sandboxing Co-authored-by: Claude Opus 4.5 --- Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Dockerfile b/Dockerfile index c739262..77a5778 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,6 +9,9 @@ SHELL ["/bin/bash", "-o", "pipefail", "-c"] # Install additional system packages (base image already includes git, curl, sudo, etc.) RUN apt-get update && apt-get install -y --no-install-recommends \ + # Sandboxing support for Claude Code + bubblewrap \ + socat \ # Modern CLI tools fzf \ ripgrep \