Sandboxing Claude Code

[rubiojr]

I've been doing Docker for a while, but trying to settle on something simpler/faster: https://github.com/rubiojr/pearls/blob/main/landrun-claude-code.md

Any suggested/improvements?

[zbynekwinkler]

I've been trying to use it with gemini cli. Besides the obvious changes, I needed to add read-write access to /dev/{pts,ptmx,tty}. Without it I was getting forkpty-related errors. I am not sure if all are needed since I just asked gemini to fix the script and this is what it came up with.

[zbynekwinkler]

It also needs rwx access to ~/.gemini/ or ripgrep won't work.