Skip to content

Latest commit

 

History

History
46 lines (37 loc) · 1.1 KB

landrun-claude-code.md

File metadata and controls

46 lines (37 loc) · 1.1 KB

Sandbox Claude Code with Landrun

This pearl uses landrun to sandbox Claude Code agents to only be able to read and write from certain directories.

Warning

Highly experimental.

Requirements

#!/bin/sh

landrun --unrestricted-network --ldd \
			       --add-exec \
			       --env TERM \
			       --env HOME \
			       --env PATH \
			       --ro /etc/ssl/certs \
			       --ro /etc/ssl \
			       --ro /etc/host.conf \
			       --ro /etc/nsswitch.conf \
			       --ro /etc/hosts \
			       --ro /etc/resolv.conf \
			       --ro /etc/ld.so.cache \
			       --ro /proc \
			       --ro /dev \
			       --rox /lib64 \
			       --rox /lib  \
			       --rox /bin \
			       --rox /usr/bin \
			       --rw /dev/null \
			       --rw $HOME/.claude \
			       --rw $HOME/.claude.json \
			       --rw $HOME/.local/state/claude \
			       --rw $HOME/.local/share/claude \
			       --rw /tmp \
			       --rwx $PWD \
			       $HOME/.local/bin/claude