Post by @micahflee@infosec.exchange

2025-10-31 18:44 UTC

I made a little project called Claudito (little Claude, in a sandbox) that runs Claude Code in a docker container, isolating it from your filesystem, your SSH keys, etc. Check it out: https://github.com/micahflee/claudito

Replies (5)

@thechris@norden.social 2025-10-31 19:14

@micahflee I made a little project that doesn't run fucking Claude at all. No access to anything, not even my code...

Open ##1345575
@worik@mastodon.social 2025-10-31 19:22

@micahflee This is a nice application of Docker.

Open ##1345576
@benjamineskola@hachyderm.io 2025-10-31 19:32

@micahflee oh no, why

Open ##1345577
@flipper@mastodonapp.uk 2025-10-31 20:52

@micahflee how is it going to delete important files or push your AWS keys to the source of your website now?

Open ##1345578
@gnyman@infosec.exchange 2025-11-01 15:27

@micahflee containers are good for this, I've been running the agents in containers in yolo mode for various stuff, really useful when you need them to figure out something involving tools instead of just code The next step is to limit the connectivity so it can't exfiltrate your code, it's a bit harder but with some firewall it and forcing all traffic through a proxy it's possible to do precise enough filtering But, looking at your dockerfile... what's up with running apt-get update 6 times and deleting the list each time. I mean bandwidth is cheap by why waste it?

Open ##1345580