If you want to run stuff in Docker as root, better enable uid remapping, since otherwise the in-container uid 0 is still the real uid 0 and weakens the security boundary of the containerization.
(Because Docker doesn't do this as by default, best practice is to create a non root user in your dockerfile and run as that)
Comments
I should be allowed to do stupid things when I want. Give me an override!
A couple of people have since tipped me off that this works around that:
You can run that as root and Claude won't complain.If you want to run stuff in Docker as root, better enable uid remapping, since otherwise the in-container uid 0 is still the real uid 0 and weakens the security boundary of the containerization.
(Because Docker doesn't do this as by default, best practice is to create a non root user in your dockerfile and run as that)
Correction: it's IS_SANDBOX=1