Docker Claude Code

docker-claude-code - Dockerized Claude Code Sandbox

Run Claude Code in an isolated Docker container with multi-profile support, security hardening, best-practice defaults, a set of pre-installed plugin/skill bundles and remote dev support. Drop-in replacement for claude — a simple shell alias is all it takes.

- Drop-in replacement: Works like claude — same arguments after --, same workflow, just run cc1 instead of claude, Linux and MacOS support.
- Secure sandbox: Non-root user and no sudo, all capabilities dropped, hardened seccomp policy, supports gVisor syscall isolation, additional nested bubblewrap for sandboxed Bash tool, startup security scans (AgentShield + unicode), audit log at ~/.claude/audit-log.jsonl.
- Multi-profile support: Per-profile persistent state in ~/.claude- to separate work and personal accounts, mix subscription and API key billing.
- Best practices by default: Start in plan mode, optimized token usage, telemetry disabled, claude-powerline status line, pre-configured tool allowlist and denylist.
- Plugins and skills: SuperClaude, claude-skills, codemap, 58+ agentic-awesome-skills bundles, and Anthropic's official marketplace, enabled on demand via /plugin.
- Remote dev support: Mutagen bidirectional sync + Docker socket forwarding allow executing commands in a remote dev environment.
- Minimal and auditable: ~200 lines of shell + Dockerfile, no dependencies beyond Docker, small enough to read and modify — don't trust us, ask your AI to audit it.

Change: With 0.9.0 the advanced syntax changed to support multiple mount dirs, all claude arguments must now follow a liteal -- (e.g. cc1 -- -p "prompt"). We also shortened the DISABLE_SECURITY_SCAN env var to DISABLE_SCAN. Do not forget to update the shell alias script to take…