From 37884312a3971fb9d7bd01f2b7082c35a940d7a9 Mon Sep 17 00:00:00 2001 From: Hiran Wijesinghe Date: Mon, 9 Nov 2026 14:29:52 +0000 Subject: [PATCH] fix: pass /dev/net/tun into the devcontainer claude-sandbox requires the TUN device, so it cannot run inside the devcontainer without it. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01NcejfBKVo1C9TzoxFSSjgP --- .devcontainer/devcontainer.json | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index c12cce59d..82efd255c 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -49,7 +49,9 @@ // Allow the container to access the host X11 display and EPICS CA "--net=host", // Make sure SELinux does not disable with access to host filesystems like tmp - "--security-opt=label=disable" + "--security-opt=label=disable", + // Allow the container to use the TUN device, required by claude-sandbox + "--device=/dev/net/tun" ], "mounts": [ // Mount in the user terminal config folder so it can be edited