Re:Claude Code sends your email address to websites
by creesch on Friday November 06, 2026 @06:42AM
(#50391176)
> I would also like to add a list of allowed site, closing all the others, but it is quite complex from docker.
Maybe use two containers in the same docker network. One docker container has the agent and is not allowed to leave the network. The other container you'd run a proxy in with whitelisting and that container is allowed to leave the network.
Re:Claude Code sends your email address to websites
by Melatonic on Friday November 06, 2026 @12:50PM
(#50395714)
Why not use a microVM instead of a container ?
Re:Claude Code sends your email address to websites
by NateEag on Saturday November 07, 2026 @01:26PM
(#50406757)
You want a VM, not a container, because VMs are harder to escape.
since my employer is compelling me to throw out my expertise and rot my brain with Claude, I've been using clawk to sandbox instances in VMs: https://github.com/clawkwork/clawk
It's not perfect, but it works pretty well, and has done a nice job of forcing me to think through exactly what I'm allowing Claude access to and why, and what the risks are.
I would also like to add a list of allowed site, closing all the others, but it is quite complex from docker.
It is not safe like a isolated VM, but it is a good trade-off to avoid letting a model to wipe out all your home directory or looking into other files in your disk.
As always feedback is wellcomed