Sandboxing Claude Code to Host My PAI (Personal AI Infrastructure)

[Wayku7]

Has anyone here tried installing Claude Code inside a Dev Docker Container for security reasons?

Personally, I prefer not to give full system access to Claude Code. Even though it says it only works within the selected folder, I’d rather isolate it in a Docker sandbox, granting access only to specific host folders under strict control.

I’ve been running it over the past few weeks with my first version of the PAI.
Right now, I’m taking the opportunity to update my Docker container, since I need to rebuild my PAI with Claude’s new skills system from Anthropic, following Daniel’s v0.6 PAI update.

The file structure of my PAI is separated from my personal data files — kind of a split version of my Telos file system — with a dedicated Git repo for each part.

---

💬 Curious to know if anyone else is experimenting with a similar setup.

Jack

[smolcompute]

Hi. I've tried running PAI inside a container on my M2 Macbook Air but Docker kept crashing.
However, Claude Code just rolled out a sandbox feature that allows you to specify exactly what folders PAI has access to. I don't like the way they've designed the rules right now but it works...

https://docs.claude.com/en/docs/claude-code/sandboxing

[parnoldx]

Maybe this helps https://github.com/micahflee/claudito