Block a user
claude-sbx (probe)
Published 2026-07-31 12:36:36 +00:00 by mroberts
Installation
docker pull git.mroberts.dev/mroberts/claude-sbx:probesha256:a531e80642ad0abfe38ac894da496a8b38424dc1200cccbc7690fbfb1d51637c
About this package
The Ubuntu container image maintained by Canonical
Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things.
It is the world's most popular operating system across public clouds and OpenStack clouds.
It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale.
Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
Image Layers
| umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/.temp_layer.9106.tar --tag 26.04 |
| umoci config --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:26.04 --clear=config.entrypoint --clear=config.cmd |
| umoci config --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:26.04 --clear=config.cmd --config.cmd /bin/bash |
| umoci config --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:26.04 --config.env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| umoci config --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:26.04 --clear=config.labels --config.label org.opencontainers.image.version=26.04 --config.label org.opencontainers.image.title=ubuntu --config.label org.opencontainers.image.created=2026-06-10T03:30:57.931695+00:00 --config.label org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide. |
| umoci config --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:26.04 --clear=manifest.annotations --manifest.annotation org.opencontainers.image.version=26.04 --manifest.annotation org.opencontainers.image.title=ubuntu --manifest.annotation org.opencontainers.image.created=2026-06-10T03:30:57.931695+00:00 --manifest.annotation org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide. |
| umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-79fcbede9d5522fcffb04b46daf93b5a/images/.temp_layer.control_data.9106.tar |
| ARG TARGETPLATFORM=linux/amd64 |
| ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global |
| ENV PATH=/home/agent/.local/bin:/usr/local/share/npm-global/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV NO_PROXY=localhost,127.0.0.1,::1,172.17.0.0/16 |
| ENV no_proxy=localhost,127.0.0.1,::1,172.17.0.0/16 |
| WORKDIR /home/agent/workspace |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -euxo pipefail # Add Docker repos apt-get update apt-get install -yy --no-install-recommends \ ca-certificates \ curl \ gnupg install -m 0755 -d /etc/apt/keyrings curl -fsSL https://download.docker.com/linux/ubuntu/gpg | \ gpg --dearmor -o /etc/apt/keyrings/docker.gpg chmod a+r /etc/apt/keyrings/docker.gpg echo \ "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \ $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}") stable" | \ tee /etc/apt/sources.list.d/docker.list > /dev/null # buildkit |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -ex # Remove base image user userdel ubuntu || true # Create non-root user useradd --create-home --uid 1000 --shell /bin/bash agent groupadd -f docker usermod -aG sudo agent usermod -aG docker agent # Configure sudoers mkdir /etc/sudoers.d chmod 0755 /etc/sudoers.d echo "agent ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/agent echo "Defaults:%sudo env_keep += \"http_proxy https_proxy no_proxy HTTP_PROXY HTTPS_PROXY NO_PROXY SSL_CERT_FILE NODE_EXTRA_CA_CERTS REQUESTS_CA_BUNDLE JAVA_TOOL_OPTIONS\"" > /etc/sudoers.d/proxyconfig # Create sandbox config mkdir -p /home/agent/.docker/sandbox/locks # Pre-create .local directories with correct ownership to prevent OCI runtime # from creating them as root when mounting volumes at deep paths like # /home/agent/.local/share/opencode (see docker/dash#914). mkdir -p /home/agent/.local/share /home/agent/.local/state chown -R agent:agent /home/agent # Set up npm global package folder under /usr/local/share mkdir -p /usr/local/share/npm-global chown -R agent:agent /usr/local/share/npm-global # buildkit |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c touch /etc/sandbox-persistent.sh && chmod 644 /etc/sandbox-persistent.sh && chown agent:agent /etc/sandbox-persistent.sh # buildkit |
| ENV BASH_ENV=/etc/sandbox-persistent.sh |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -ex cat > /etc/profile.d/sandbox-persistent.sh << 'PROFILEEOF' # Source the sandbox persistent environment file if [ -f /etc/sandbox-persistent.sh ]; then . /etc/sandbox-persistent.sh fi # Export BASH_ENV so non-interactive child shells also source the persistent env export BASH_ENV=/etc/sandbox-persistent.sh PROFILEEOF chmod 644 /etc/profile.d/sandbox-persistent.sh # buildkit |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -ex # Create our prepend content cat > /tmp/sandbox-bashrc-prepend << 'PREPEND' # Docker Sandbox: Source persistent environment for interactive shells if [ -f /etc/sandbox-persistent.sh ]; then . /etc/sandbox-persistent.sh fi # Export BASH_ENV so non-interactive child shells also source the persistent env export BASH_ENV=/etc/sandbox-persistent.sh PREPEND # Prepend our content to existing bashrc cat /tmp/sandbox-bashrc-prepend /etc/bash.bashrc > /tmp/new-bashrc mv /tmp/new-bashrc /etc/bash.bashrc chmod 644 /etc/bash.bashrc rm /tmp/sandbox-bashrc-prepend # buildkit |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -ex cat > /home/agent/.bashrc << 'BASHRCEOF' # Source the sandbox persistent environment file if [ -f /etc/sandbox-persistent.sh ]; then . /etc/sandbox-persistent.sh fi # Export BASH_ENV for child non-interactive shells export BASH_ENV=/etc/sandbox-persistent.sh BASHRCEOF chmod 644 /home/agent/.bashrc chown agent:agent /home/agent/.bashrc # buildkit |
| COPY /uv /usr/local/bin/uv # buildkit |
| COPY /out/clipboard-bridge /usr/local/bin/clipboard-bridge # buildkit |
| USER root |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -euxo pipefail apt-get update apt-get install -yy --no-install-recommends \ bubblewrap \ dnsutils \ docker-buildx-plugin \ docker-ce-cli \ docker-compose-plugin \ git \ gh \ jq \ less \ lsof \ make \ openssh-client \ procps \ psmisc \ ripgrep \ rsync \ socat \ sudo \ tini \ unzip apt-get clean rm -rf /var/lib/apt/lists/* # buildkit |
| USER agent |
| ENTRYPOINT ["tini" "--"] |
| USER root |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -euxo pipefail apt-get update apt-get install -yy --no-install-recommends \ bc \ default-jdk-headless \ golang \ man-db \ nodejs \ npm \ python3 \ python3-pip apt-get clean rm -rf /var/lib/apt/lists/* # buildkit |
| USER agent |
| USER root |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -euxo pipefail apt-get update apt-get install -yy --no-install-recommends \ containerd.io \ docker-ce apt-get clean rm -rf /var/lib/apt/lists/* # buildkit |
| USER agent |
| RUN |1 TARGETPLATFORM=linux/amd64 /bin/sh -c set -ex # Install Claude Code curl -fsSL https://claude.ai/install.sh | bash # buildkit |
| ENV CLAUDE_ENV_FILE=/etc/sandbox-persistent.sh |
| LABEL com.docker.sandboxes.start-docker=true |
| CMD ["claude" "--dangerously-skip-permissions"] |
Labels
| Key | Value |
|---|---|
| com.docker.sandboxes | templates |
| com.docker.sandboxes.base | ubuntu:questing |
| com.docker.sandboxes.flavor | claude-code-docker |
| com.docker.sandboxes.start-docker | true |
| org.opencontainers.image.created | 2026-06-10T03:30:57.931695+00:00 |
| org.opencontainers.image.description | The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide. |
| org.opencontainers.image.title | ubuntu |
| org.opencontainers.image.version | 26.04 |