Configure the sandboxed Bash tool changedsandboxing
Nearest release: v2.1.314, published 4 hours after upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 29 Oct 2026 19:37 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 30 Oct 2026 18:07 UTC.
Upstream edited
Recorded here
Lines+13added
Lines−13removed
From line
115
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits60to this page, all time
The whole hunk
from line 115, old and new numbered
/
from line 115
115115
116116Install them with your distribution's package manager:
117117
118**Ubuntu/Debian**
118> [tab] Ubuntu/Debian
119>
120> ```bash theme={null}
121> sudo apt-get install bubblewrap socat
122> ```
119123
120```bash theme={null}
121sudo apt-get install bubblewrap socat
122```
124> [tab] Fedora
125>
126> ```bash theme={null}
127> sudo dnf install bubblewrap socat
128> ```
123129
124**Fedora**
125
126```bash theme={null}
127sudo dnf install bubblewrap socat
128```
129
130130When a dependency is missing, the Dependencies tab in `/sandbox` lists which of `ripgrep`, `bubblewrap`, `socat`, and the seccomp filter your platform lacks. If you don't see the tab after installing and restarting Claude Code, all dependencies are present.
131131
132132Ripgrep is bundled with the native Claude Code binary. The seccomp filter is optional and adds Unix domain socket blocking. Install it with `npm install -g @anthropic-ai/sandbox-runtime` if it is missing.
from line 133
133133
134134When a required dependency is missing, the Dependencies tab is the only tab shown until you install it. When only the optional seccomp filter is missing, the Dependencies tab appears alongside the other tabs. The dependency check runs at startup, so restart Claude Code after installing packages for `/sandbox` to detect them.
135135
136> **Ubuntu 24.04 and later: allow bubblewrap to create user namespaces**
136> [accordion] Ubuntu 24.04 and later: allow bubblewrap to create user namespaces
137137>
138138> On Ubuntu 24.04 and later, the default AppArmor policy prevents bubblewrap from creating the user namespaces it needs for isolation.
139139>
from line 157
157157> sudo systemctl reload apparmor
158158> ```
159159
160> **WSL2 notes**
160> [accordion] WSL2 notes
161161>
162162> Check your WSL version with `wsl -l -v` from PowerShell. If you see `Sandboxing requires WSL2`, your distribution is running WSL1. Upgrade it to WSL2 or run Claude Code without sandboxing.
163163>
No line in this hunk matches that.