Zero-config devcontainer for Claude Code & Codex CLI — firewall, plugins, Langfuse tracing, MCP servers, and 80+ slash commands out of the box. One command to install.

A VS Code devcontainer setup that sandboxes AI agents (Copilot, etc.) by restricting both file system access and network access.

Shared firewall allowlist for Ocillo devcontainers

Secure devcontainer for OpenCode with network isolation via iptables firewall

Secure, opinionated Claude Code-ready devcontainer base image with firewall domain allowlisting

Extras to show how DevContainers and Codespaces can be used for remote development with resources behind the firewall

Reference DevContainer for running Claude Code securely in team environments. Wide read, narrow write architecture with hardened firewall, MCP servers, and scoped permissions.

Lightweight Docker container for running Claude Code with egress firewall isolation. Default-deny iptables rules whitelist only essential domains (GitHub, npm, Anthropic API). Per-project isolation with UID/GID alignment. Enables safe --dangerously-skip-permissions usage without the heavyweight devcontainer tooling.