Running Claude Code in a Container (And Why You Probably Should Too)
I’ve been using Claude Code heavily for the past few months, and at some point I started getting uncomfortable with what it could reach. Not because it had done anything wrong — it hadn’t — but because the blast radius if something did go wrong was my entire home directory. One rogue prompt injection in a skill file or a malicious string lurking in some library’s README, and Claude dutifully rm -rfs the wrong thing or reads my SSH keys into a response. It can’t run sudo, sure, but it doesn’t need to. Everything that matters to me as a user lives in ~. ...