A lightweight bash script that runs Claude Code in a fully sandboxed environment using bubblewrap. The Claude binary never executes outside the sandbox - updates and version checks happen inside.
- Drop-in replacement for claude code cli
- Claude binary never runs outside sandbox
- Only project directory is writable
- Also restricts read access
- Automatic updates inside sandbox
- Small single bash script, minimal overhead
Linux or WSL2 with bubblewrap and curl:
sudo apt install bubblewrap curl # Ubuntu/Debianmkdir -p "$HOME/.local/bin"
cp claude-launcher.sh "$HOME/.local/bin/claude"
chmod +x "$HOME/.local/bin/claude"
# Add $HOME/bin to PATH if not already present
export PATH="$HOME/.local/bin:$PATH"claude # Launch in current directory
claude mcp list # List installed MCP servers| claude-launcher.sh | Built-in Sandbox | Dev Container + Claude Feature | claudebox | ClaudeCage | cco | |
|---|---|---|---|---|---|---|
| Technology | Bubblewrap | Bubblewrap + socat | Dev Container + Docker/Podman | Docker | RunImage + Bubblewrap | Multiple |
| Easy to review | Yes (~100 lines) | ❌ No (closed source) | Yes (config files) | ❌ No (thousands of lines) | Moderate (build script) | ❌ No (thousands of lines) |
| Binary isolation | Yes | ❌ Only "BashTool" | Container only | Container only | Portable executable | Yes |
| Protect private files | Yes (selective mounts) | ❌ No (--ro-bind / /) 1 | Yes (workspace only) | Yes 1 | Yes 1 | ❌ No (--ro-bind / /) 1 |
| Filters network traffic | No | Yes (socat proxy + seccomp) | No | No | No | No |
| WSL Support | Yes | Yes (since 2026) | Yes (Docker/Podman) | Yes (Docker) | Yes | Yes |
| Overhead | Minimal | Minimal | Container runtime + layers | Docker daemon + layers | Moderate | Moderate |
| Startup time | Instant | Instant | Container startup | Container startup | Instant | Instant |
| Setup complexity | Single script | Built-in | Dev Container config | Moderate | Build script | Single script |
| Provides matching tools | System tools | System tools | Yes (Customizable) | Pre-configured profiles | System tools | System tools |
| Best for | Local development | Always, nesting possible | VSCode/IDEs integration | Local development | Local development | Local development |