Docker sandbox for Claude Code CLI
Claude Pod runs the Claude Code CLI inside a Docker container that mounts only the project folder you launch from, leaving your home directory, SSH keys and other projects invisible to the container.
The practical effect narrows the worst case exposure from your entire machine to a single folder that can be recovered from git, as stated in the official documentation.
No Node.js, npm or claude CLI need be installed on the host; the only requirement is Docker, and a state folder at ~/.claude preserves login across container restarts.
You can invoke the script by its full or relative path from any project, which drops you into a bash shell at the project path with claude on PATH, or you can pass arguments directly to launch Claude without an intermediate shell.
Running the script with the help option displays a cheatsheet of all commands and their absolute paths, and you may add an alias in your shell configuration to simplify usage.
- Bind ports via the PORTS environment variable, but remember the host mapping remains 127.0.0.1 only, so bind your dev server to 0.0.0.0 inside the container.
- Images located outside the project folder are not mounted, so Claude cannot access files on the Desktop or in Downloads.
By default the container has unrestricted outbound traffic, while the bind mount isolates the project folder; any hardlink to sensitive files within the project can expose those files, so treat untrusted projects with caution.
Com informações de: Claude Updates