2581 Dclaude Docker Wrapper D0d42267

Resource Evaluation: dclaude — Dockerized Claude Code Wrapper

Summary

1. dclaude is a single-file bash script wrapping Claude Code CLI inside a standard Docker container for filesystem isolation. Drop-in replacement: all Claude CLI flags forwarded.
2. Primary motivation: Claude Code can navigate entire filesystems, including other git worktree branches, risking accidental edits to production code. dclaude restricts visibility to mounted directories only.
3. Features: SSH agent forwarding, GPG signing, Docker-in-Docker (via host socket), automatic port mapping with URL rewriting, persistent named containers, GitHub token forwarding, .env auto-loading.
4. Installation: Single curl download, auto-builds Docker image on first run. Requires Docker Engine only (no Docker Desktop).
5. Security model: Standard container isolation (not microVM). Mounts host Docker socket (/var/run/docker.sock), ~/.ssh, ~/.gnupg into container — expands attack surface vs. Docker Sandboxes' private daemon approach.

Gap Analysis

Score Justification

2/5 (Marginal) because:

• The guide already covers Docker Sandboxes (official, microVM isolation) plus 5 alternatives — no material gap
• dclaude uses standard containers, not microVMs — weaker isolation than Docker Sandboxes. The guide's own anti-patterns (line 377) warn: "Assuming containers = VMs"
• Host Docker socket mount means containerized Claude can control the host Docker daemon — opposite of Docker Sandboxes' private daemon
• Single-maintainer bash script with no lifecycle guarantees
• However: works on Linux with Docker Engine (real gap), and Patrick Debois's standing in the DevOps community gives credibility

Why not 3/5: Weaker security model and narrow differentiator (Linux-only gap) don't warrant a dedicated section. The guide documents the Linux limitation already.

Why not 1/5: Fills a legitimate gap for Linux Docker Engine users. Debois's contribution merits acknowledgment.

Challenge (technical-writer)

The technical-writer agent confirmed the 2/5 score with additional analysis:

• Security under-analyzed: Host Docker socket mount is a material concern, not just "weaker isolation"
• Debois credibility understated: He coined "DevOps" — not just "a known figure"
• Drop-in claim unverified: Edge cases (MCP servers, --resume, session persistence) likely have friction
• Placement recommendation refined: Footnote in Limitations subsection (line 225), NOT in comparison matrix
• Risk of non-integration: Minimal — no reader fails to find a sandbox solution without dclaude

Fact-Check

Integration Applied

• guide/sandbox-isolation.md line 225 — Footnote mention in Limitations subsection with security tradeoff note
• docs/resource-evaluations/dclaude-docker-wrapper.md — This file
• docs/resource-evaluations/README.md — Index entry added