claude-code - 💡(How to fix) Fix Sandbox broken on Linux kernel 6.17: apply-seccomp: write /proc/self/setgroups (nested userns is capability-restricted) [1 comments, 2 participants]

• Claude Code embeds its own bubblewrap implementation (error string found in binary) — not calling system bwrap

TL;DR

Disable the sandbox by setting "sandbox": { "enabled": false } in the settings.local.json configuration to workaround the issue.

Guidance

• The error message suggests a permission issue related to CAP_SYS_ADMIN capability, which is required for setting up user namespaces.
• The fact that the system bwrap works fine, but the embedded bubblewrap in Claude Code fails, points towards a compatibility issue with kernel 6.17.
• Disabling the sandbox is a viable workaround, but it may have security implications that should be considered.
• To verify the workaround, try running a sandboxed Bash command after disabling the sandbox and check if it succeeds without the Permission denied error.

Example

No code snippet is necessary in this case, as the workaround involves modifying the configuration file.

Notes

The root cause of the issue is likely related to the embedded bubblewrap implementation in Claude Code being incompatible with kernel 6.17. Disabling the sandbox may not be a permanent solution and may have security implications.

Recommendation

Apply the workaround by disabling the sandbox, as it is a straightforward and effective solution to the problem, although it may require further investigation to find a more permanent fix that balances security and functionality.