If you want to run stuff in Docker as root, better enable uid remapping, since otherwise the in-container uid 0 is still the real uid 0 and weakens the security boundary of the containerization.
(Because Docker doesn't do this as by default, best practice is to create a non root user in your dockerfile and run as that)
Comments
A couple of people have since tipped me off that this works around that:
You can run that as root and Claude won't complain.If you want to run stuff in Docker as root, better enable uid remapping, since otherwise the in-container uid 0 is still the real uid 0 and weakens the security boundary of the containerization.
(Because Docker doesn't do this as by default, best practice is to create a non root user in your dockerfile and run as that)
Correction: it's IS_SANDBOX=1