Skip to content

Conversation

@dominikaveresch-cc
Copy link
Collaborator

Add --docker flag to mount the host's Docker socket into the container, enabling Docker commands inside AgentBox. Includes:

  • Docker CLI installation in Dockerfile from official repository
  • Container user added to docker group
  • Socket detection for both Linux and Docker Desktop on macOS
  • Automatic group permission handling via --group-add

🤖 Generated with Claude Code

@dominikaveresch-cc dominikaveresch-cc force-pushed the feat/docker-socket-mounting branch from 0bea793 to 9c36f80 Compare January 19, 2026 10:14
agentbox Outdated
fi
else
run_container "$container_name" validated_dirs "$tool" "${cmd_args[@]}"
run_container "$container_name" validated_dirs ""$docker_mount" "$tool" "${cmd_args[@]}"
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Take a look at the quotes. It should be "$docker_mount" all three times.

@dominikaveresch-cc dominikaveresch-cc force-pushed the feat/docker-socket-mounting branch from 9c36f80 to 9ba7fbe Compare January 22, 2026 07:32
Add --docker flag to mount the host's Docker socket into the container,
enabling Docker commands inside AgentBox. Includes:

- Docker CLI installation in Dockerfile from official repository
- Container user added to docker group
- Socket detection for both Linux and Docker Desktop on macOS
- Automatic group permission handling via --group-add

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>
@dominikaveresch-cc dominikaveresch-cc force-pushed the feat/docker-socket-mounting branch from 9ba7fbe to bf3fe93 Compare January 22, 2026 08:43
@fletchgqc
Copy link
Owner

What is the purpose of this feature? Do you want the agent to be able to run docker containers?

Do you consider this to be fine from a security perspective?

@dominikaveresch-cc
Copy link
Collaborator Author

Our testing infrastructure relies on Testcontainers for integration testing. Therefore the agent must be able to run Docker containers.

@dominikaveresch-cc
Copy link
Collaborator Author

And yes docker in docker is a security concern but thats why --docker is a optional flag.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants