Skip to content

Comment on Isolating Claude Codeparent

Comments

I found VM to be on-par with Docker. Sure, the initial provision takes time, but this is true to for initial Docker build as well. I know that worrying about sharing kernel with the Docker container, is probably light paranoia, but I really don't trust agents to not run malicious code.

Distributing pre-built images can help minimize this: https://hub.docker.com/r/nezhar/claude-container/tags.

I'm not sure how large the image becomes on the VM or if the distribution process is straightforward.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.