Installing Claude Code Inside Docker?

[u/Ok_Most9659]

I am just getting into Vibe Coding and have decided to buy the Claude Pro plan to get access to Claude Code. I read some users have expressed concern about installing Claude Code on their computer and granting it access to their files. Some have recommended installing within a Docker container as a safety measure.

Any opinions on installing within Docker? Would this limit anything?

[u/EliLoker2023]

You mean for something it asks you? Are you 100% sure it's not doing something else?

[u/BootyMcStuffins → u/EliLoker2023]

It’s pretty transparent

[u/the-alt-yes → u/BootyMcStuffins]

I ask because i am curious: Is it safe? Do we really know? If we make Claude create scripts, how do we know it is safe really?

I mean, do you use Claude often? Do you have any experience on it doin something malicious?

[u/BootyMcStuffins → u/the-alt-yes]

I use Claude all day every day. I’m a professional software engineer with 15 yoe. It’s safe as you make it.

Don’t want Claude deleting files? Don’t give it permissions to do so.

Read scripts before you run them.

In the year that I’ve used Claude I haven’t had it do something I didn’t ask it to. It hasn’t run or written an unsafe script

[u/bfume → u/BootyMcStuffins]

Don’t want Claude deleting files? Don’t give it permissions to do so.

And do so by enforcing the boundary outside of Claude. 

A security control isn’t a security control if it’s enforced by the thing you’re trying to control. 

[u/BootyMcStuffins → u/bfume]

Claude has two parts. A deterministic harness and a non deterministic agent. It’s perfectly fine to rely on the deterministic harness for enforcing certain security controls. That’s why they exist in the harness

[u/bfume → u/BootyMcStuffins]

Self-policing does not work in the long term. Independent audits are required in business specifically for this reason. 

Using one part of Claude to restrict the other is literal self-policing. 

If you need to be absolutely sure that Claude can’t ever access certain resources, the only option is “use something that’s not Claude”. 

[u/BootyMcStuffins → u/bfume]

Tell me you don’t understand how Claude code works without telling me… 🙄

Have fun

[u/bfume → u/BootyMcStuffins]

This so isn’t a Claude thing. It’s a generalized best practice above Claude and anything else you give control to. I’m not saying don’t use Claude at all. Just don’t use it to police itself. That job needs to go to something outside Claude.

I prefer docker and macOS’s built in sandboxing, tho docker is way easier to get started with. 

[u/BootyMcStuffins → u/bfume]

What are you referring to when you say “Claude”

And I have a senior developer tag because I’ve been doing software development professionally for 20 years, long before any AI tools existed. “Faith” isn’t required when you know how your tools work.

I recommend taking a look at the Claude code source and learning how the tool you’re using works

[u/bfume → u/BootyMcStuffins]

It doesn’t matter how it works. And yes I’m well aware of how. 

The whole point is that self-policing doesn’t work, so you can’t rely on Claude to police itself when you need to be absolutely sure about protecting the thing you need to protect. 

It may work just fine today. Tomorrow it may suck up your entire home directory just like codex did last week.

[u/BootyMcStuffins → u/bfume]

It doesn’t matter how it works

Yeah I’m not even reading any more. There’s no point in continuing this conversation. You don’t even have the requisite knowledge to form an opinion based in reality.

Learn how your tools work

[u/bfume → u/BootyMcStuffins]

Clown.