Hacker News

points by tikkabhuna 2 days ago | 0 comments

Claude code uses bubblewrap[1] to offer some isolation. I'd love to hear from others whether its a reasonable solution or not.

[1] https://github.com/containers/bubblewrap

[–] rdg1991 2 days ago

Claude frequently has decided to disable its own sandbox when I've had it running so I absolutely do not trust their implementation. Wrapping with `nono` or `sbx` has mitigated that on my side.

[–] f53d 2 days ago

I have also experienced this. Now I run Claude Code (or preferably Pi) inside a bubblewrap instance spawned and controlled by me that the agentic harness cannot disable by it's own choice.

[–] Matl 2 days ago

Also used by ZeroStack[1], which I quite like, but whether it provides 'meaningful' protection am less sure.

1 - https://github.com/gi-dellav/zerostack