remove unprivileged jail

Author: evgeniy-scherbina

registry/coder/modules/claude-code/main.tf

@@ -204,12 +204,6 @@ variable "boundary_log_dir" {
   default     = "/tmp/boundary_logs"
 }
 
-variable "boundary_unprivileged" {
-  type        = bool
-  description = "Whether to use --unprivileged flag with coder boundary (recommended for security)"
-  default     = true
-}
-
 variable "boundary_additional_allowed_urls" {
   type        = list(string)
   description = "Additional URLs to allow through boundary (in addition to default allowed URLs)"
@@ -246,12 +240,6 @@ resource "coder_env" "claude_api_key" {
   value    = var.claude_api_key
 }
 
-resource "coder_env" "mcp_server_port" {
-  agent_id = var.agent_id
-  name     = "MCP_SERVER_PORT"
-  value    = "8081"
-}
-
 locals {
   # we have to trim the slash because otherwise coder exp mcp will
   # set up an invalid claude config 
@@ -304,7 +292,6 @@ module "agentapi" {
      ARG_AI_PROMPT='${base64encode(var.ai_prompt)}' \
      ARG_ENABLE_BOUNDARY='${var.enable_boundary}' \
      ARG_BOUNDARY_LOG_DIR='${var.boundary_log_dir}' \
-     ARG_BOUNDARY_UNPRIVILEGED='${var.boundary_unprivileged}' \
      ARG_BOUNDARY_ADDITIONAL_ALLOWED_URLS='${join(" ", var.boundary_additional_allowed_urls)}' \
      ARG_CODER_HOST='${local.coder_host}' \
      /tmp/start.sh

registry/coder/modules/claude-code/scripts/start.sh

@@ -17,7 +17,6 @@ ARG_WORKDIR=${ARG_WORKDIR:-"$HOME"}
 ARG_AI_PROMPT=$(echo -n "${ARG_AI_PROMPT:-}" | base64 -d)
 ARG_ENABLE_BOUNDARY=${ARG_ENABLE_BOUNDARY:-false}
 ARG_BOUNDARY_LOG_DIR=${ARG_BOUNDARY_LOG_DIR:-"/tmp/boundary_logs"}
-ARG_BOUNDARY_UNPRIVILEGED=${ARG_BOUNDARY_UNPRIVILEGED:-true}
 ARG_CODER_HOST=${ARG_CODER_HOST:-}
 
 echo "--------------------------------"
@@ -31,7 +30,6 @@ printf "ARG_AI_PROMPT: %s\n" "$ARG_AI_PROMPT"
 printf "ARG_WORKDIR: %s\n" "$ARG_WORKDIR"
 printf "ARG_ENABLE_BOUNDARY: %s\n" "$ARG_ENABLE_BOUNDARY"
 printf "ARG_BOUNDARY_LOG_DIR: %s\n" "$ARG_BOUNDARY_LOG_DIR"
-printf "ARG_BOUNDARY_UNPRIVILEGED: %s\n" "$ARG_BOUNDARY_UNPRIVILEGED"
 printf "ARG_CODER_HOST: %s\n" "$ARG_CODER_HOST"
 
 echo "--------------------------------"