Guides

Docker sandboxes

Claude Code in a local Docker sandbox, on the bar with one switch.

Claude Code in a local Docker sandbox (sbx) runs in a VM of its own, so it can’t reach the hooks Evlat installs on your Mac. Turn on Settings → Docker sandboxes → Watch sandboxes and keep using sbx as you do: Evlat sets up each sandbox itself, and its sessions show on the bar under the sandbox’s name — working, waiting for you, finished. Sandboxes in Docker’s cloud can’t reach your Mac.

Watch sandboxes

The switch is off until you turn it on. You turn it on in Settings → Docker sandboxes, and the Claude Code card in Settings → This Mac points to it when sbx is on your Mac. While it is on, Evlat follows the sbx daemon: sandboxes running now are set up at once, new ones as they start. Nothing restarts — a session that is already running shows from its next message. Only Claude Code sandboxes are set up for now.

What it writes

Inside each Claude Code sandbox, as root, one file of Evlat’s own: /etc/claude-code/managed-settings.d/evlat.json, whose hooks post to Evlat. And a network rule for that sandbox alone, letting it reach port 48152 on your Mac. Nothing on your Mac changes, and nothing in your own ~/.claude.

Turning it off

Turned off, the file and the rule come out of every running sandbox. A stopped sandbox keeps the file: while Evlat isn’t listening its hooks fail at once and Claude Code carries on. Evlat never starts a stopped sandbox to clean it.

The list

Settings → Docker sandboxes lists the sandboxes on your Mac with one state each — Ready, Setting up…, Set up when it starts, or Couldn’t set up with the reason and Try Again — and one line that says whether Evlat is watching. If another program holds port 48152, or sbx isn’t running, it says that instead.

Go to session

Each sbx run to a sandbox opens a session of its own. Go to session opens the tab of the sbx run the session was started from, when it can tell which; when that terminal is closed the card says so. Answering from the bar and usage limits aren’t offered for sandbox sessions.