# claude-sandbox Technical Wiki

> A Docker sandbox layer that runs Claude Code agents inside isolated per-workspace containers launched by Superset, keeping the host git worktree as the single source of truth.

This is a Grok-Wiki source-grounded repository wiki. Use the complete Markdown link when an agent needs the full repo context.

## Context Links

- [Complete Markdown wiki](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/llms-full.txt)
- [Complete Markdown alias](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958.md)
- [Human interactive wiki](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958)
- [GitHub repository](https://github.com/hans/claude-container)

## Repository

- Repository: hans/claude-container

- Generated: 2026-05-18T19:25:52.289Z
- Updated: 2026-05-21T21:36:26.367Z
- Runtime: Grok CLI
- Format: Basic
- Pages: 6

## Pages

- [Overview](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/pages/01-overview.md): What claude-sandbox is, its core design goals (isolation without Container Use, host worktree as source of truth), and how it integrates with Superset workspaces and Claude Code.
- [Setup and Superset Integration](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/pages/02-setup-and-superset-integration.md): Prerequisites, building the image, copying the .superset/ launcher into a repo, configuring a Superset agent, and the first workspace launch flow.
- [The launch.sh Launcher](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/pages/03-the-launch.sh-launcher.md): The host-side script that performs preflight checks, detects prompts via argv/env/stdin, computes stable container names, decides between docker run and docker exec for reattach, and assembles all Docker arguments.
- [Mount Strategies: Worktrees, Symlinks, and Git](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/pages/04-mount-strategies-worktrees-symlinks-and-git.md): How launch.sh bind-mounts the worktree, resolves .git worktree pointers by mounting the parent .git directory, scans external symlinks and mounts their targets, and optionally mounts ~/.ssh read-only.
- [Container Image and Entrypoint](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/pages/05-container-image-and-entrypoint.md): The Dockerfile that builds an Ubuntu 24.04 image with Claude Code, uv, Node 22, ripgrep, and a UID-1000 claude user; the minimal entrypoint.sh that sources /workdir/.env before exec.
- [Environment Variables, Customization, and Troubleshooting](https://grok-wiki.com/public/wiki/hans-claude-container-cf30219c8958/pages/06-environment-variables-customization-and-troubleshooting.md): All CLAUDE_SANDBOX_* host and container variables, ANTHROPIC_* forwarding, network modes, per-project Dockerfile extension, and the documented failure modes with exact fixes.

## Source Files

- `.dockerignore`
- `.superset/launch.sh`
- `.superset/setup.sh`
- `Dockerfile`
- `entrypoint.sh`
- `README.md`
- `SETUP.md`