Isolating Claude Code

#1

Post by skwee357 » Sat, Jan 24, 2026, 10:41 AM UTC

Re: Isolating Claude Code

#2

Post by nezhar » Sat, Jan 24, 2026, 11:04 AM UTC

I also had the same idea when I built https://github.com/nezhar/claude-container.

What I was also curious about is what is actually sent and received by the agent, so I included this feature and created a CLI to make integration easier in a developer workflow.

Since I started doing this for other agents as well, I considered the idea of using a VM with Vagrant. However, I want the setup to remain minimal, so I still believe there is room for improvement.

Re: Isolating Claude Code

#3

Post by skwee357 » Sat, Jan 24, 2026, 11:17 AM UTC

nezhar wrote: post #2

I also had the same idea when I built https://github.com/nezhar/claude-container . What I was also curious about is what is actually sent and received by the agent, so I included this feature and created a CLI to make integration easier in a developer workflow. Since I started doing this for other agents as well, I considered the idea of using a VM with Vagrant. However, I want the setup to remain minimal, so I still…

I found VM to be on-par with Docker. Sure, the initial provision takes time, but this is true to for initial Docker build as well. I know that worrying about sharing kernel with the Docker container, is probably light paranoia, but I really don't trust agents to not run malicious code.

Re: Isolating Claude Code

#4

Post by nezhar » Sat, Jan 24, 2026, 11:35 AM UTC

skwee357 wrote: post #3

nezhar wrote: post #2

I also had the same idea when I built https://github.com/nezhar/claude-container . What I was also curious about is what is actually sent and received by the agent, so I included this feature and created a CLI to make integration easier in a developer workflow. Since I started doing this for other agents as well, I considered the idea of using a VM with Vagrant. However, I want the setup to remain minimal, so I still…

I found VM to be on-par with Docker. Sure, the initial provision takes time, but this is true to for initial Docker build as well. I know that worrying about sharing kernel with the Docker container, is probably light paranoia, but I really don't trust agents to not run malicious code.

Distributing pre-built images can help minimize this: https://hub.docker.com/r/nezhar/claude-container/tags.

I'm not sure how large the image becomes on the VM or if the distribution process is straightforward.