claude-sandbox

README

目前无法加载完整 README。请通过原文链接阅读。 以下为已保存的摘录。

Run Claude Code, Codex or Pi in a container with a bubblewrap sandbox. The sandbox isolates host credentials and IDE sockets, limits writable paths, and blocks access to internal networks except explicitly allowed devices. On a Linux host with uv and rootless Podman: The launcher pulls the matching prebuilt image and starts sandboxed Claude Code in your project. Log in when prompted. Later runs reuse the project's container; agent logins and memory persist across container recreation. No repository clone or devcontainer setup is needed.