claude-container-mssql

The container employs robust security measures against the host, including iptables for strict network isolation (whitelist by default), running as a non-root user, and restricting filesystem access to the mounted workspace. API keys are passed at runtime rather than baked into the image. However, it explicitly runs Claude Code with '--dangerously-skip-permissions', granting Claude arbitrary execution capabilities *within the container*. While this is mitigated by the container's isolation from the host, users must be aware of the high trust implicitly placed in the AI's actions inside the sandbox. The 'NET_ADMIN' capability is added for firewall management, a powerful permission, but used for a restrictive whitelist.