We've published mcci-claude-container, a lightweight Docker setup for running Claude Code with egress firewall isolation.
It's based on Anthropic's devcontainer approach but stripped down — no VS Code coupling, just iptables rules that whitelist essential domains (GitHub, npm, Anthropic API) and block everything else.
Per-project isolation, UID/GID alignment so file permissions work, and you can add custom domains as needed.

GitHub - mcci-usb/mcci-claude-container: Lightweight Docker container for running Claude Code with egress firewall isolation. Default-deny iptables rules whitelist only essential domains (GitHub, npm, Anthropic API). Per-project isolation with UID/GID alignment. Enables safe --dangerously-skip-permissions usage without the heavyweight devcontainer tooling.
Lightweight Docker container for running Claude Code with egress firewall isolation. Default-deny iptables rules whitelist only essential domains (GitHub, npm, Anthropic API). Per-project isolation...


