docker-sandbox-setup

Configure Docker containers to run Claude Code in isolated, safe environments that prevent AI agents from modifying the host system.

Purpose

This skill provides Docker configuration knowledge specifically for creating sandboxed development environments. Focus on the minimum Docker setup needed for Claude Code isolation while maintaining full development capabilities, not general Docker expertise.

Core Concepts

Isolation Strategy

Sandboxes use Docker to create complete isolation between Claude Code and the host system:

• Container boundary: All Claude Code operations occur within the container
• Volume mounts: Workspace shared between host and container for file access
• Network isolation: Port forwarding for web development, no direct host network access
• Persistent caches: Package managers and build caches preserved across restarts