d9bf0f4b53
- Replace API Key/Secret auth with Account SID/Auth Token - Configure MCP during Docker build instead of runtime - Remove mcp-config.json and config directory - Simplify startup script by removing MCP configuration logic - Update documentation and test scripts for new auth method The MCP server is now configured directly in the Dockerfile using 'claude mcp add-json' command, making the setup more reliable and eliminating runtime configuration complexity.
171 lines
6.8 KiB
Markdown
171 lines
6.8 KiB
Markdown
# Claude Docker Project Scratchpad
|
|
|
|
## Project Overview
|
|
Building a Docker container that runs Claude Code with full autonomous permissions and Twilio SMS notifications upon task completion.
|
|
|
|
## What Was Done ✅
|
|
**Phase 1 - Complete MVP:**
|
|
- GitHub repository created: https://github.com/VishalJ99/claude-docker
|
|
- Docker setup with Claude Code + Twilio MCP integration
|
|
- Wrapper script (`claude-docker.sh`) for easy invocation
|
|
- Auto .claude directory setup with MCP configuration
|
|
- Installation script for zshrc alias
|
|
- SMS notifications via Twilio MCP server
|
|
- Full autonomous permissions with --dangerously-skip-permissions
|
|
- Context persistence via scratchpad.md files
|
|
- Complete documentation and examples
|
|
- **✅ WORKING** - All startup issues resolved, Docker container launches Claude Code successfully
|
|
|
|
## Next Steps 🎯
|
|
**Phase 2 - Security & Persistence Enhancements:**
|
|
|
|
### 1. Authentication Persistence (HIGH Priority) - ✅ COMPLETED
|
|
**Problem:** Need to re-login to Claude Code every time container starts
|
|
|
|
**Research Findings:**
|
|
- Claude Code stores auth tokens in `~/.claude/.credentials.json`
|
|
- Known issues: #1222 (persistent auth warnings), #1676 (logout after restart)
|
|
- The devcontainer mounts `/home/node/.claude` for config persistence
|
|
- But auth tokens are NOT persisted properly even in devcontainer
|
|
|
|
**Implementation Completed:**
|
|
1. **Created persistent directory structure:**
|
|
- Host: `~/.claude-docker/claude-home`
|
|
- Container: `/home/claude-user/.claude`
|
|
- Mounted with read/write permissions
|
|
|
|
2. **Updated Docker setup:**
|
|
- Created non-root user `claude-user` for better security
|
|
- Set proper ownership and permissions
|
|
- Added volume mount for Claude home directory
|
|
|
|
3. **Enhanced startup script:**
|
|
- Checks for existing `.credentials.json` on startup
|
|
- Notifies user if auth exists or login needed
|
|
- Credentials persist across container restarts
|
|
|
|
**Result:** Users now login once and authentication persists forever!
|
|
|
|
### 2. Network Security (High Priority) - PLANNED
|
|
**Implementation based on devcontainer's init-firewall.sh:**
|
|
|
|
**Key Components:**
|
|
1. **Firewall Script Features:**
|
|
- Uses iptables with default DROP policy
|
|
- ipset for managing allowed IP ranges
|
|
- Dynamic IP resolution for allowed domains
|
|
- Verification of connectivity post-setup
|
|
|
|
2. **Allowed Domains Configuration:**
|
|
```yaml
|
|
allowed_domains:
|
|
- api.anthropic.com # Claude API
|
|
- api.twilio.com # SMS notifications
|
|
- github.com # Git operations
|
|
- raw.githubusercontent.com
|
|
- registry.npmjs.org # Package management
|
|
- pypi.org # Python packages
|
|
|
|
blocked_paths: # File system restrictions
|
|
- /etc
|
|
- /root
|
|
- ~/.ssh
|
|
```
|
|
|
|
3. **User-Friendly Setup:**
|
|
- Simple YAML config file for rules
|
|
- Easy enable/disable of firewall
|
|
- Logging of blocked attempts
|
|
- Graceful degradation if firewall fails
|
|
|
|
### 3. Shell History Persistence (Medium Priority)
|
|
- Add persistent bash/zsh history between container sessions
|
|
- Mount history file to host directory
|
|
- Implement history management similar to Claude dev container
|
|
- Ensure commands persist across sessions
|
|
|
|
### 4. Additional Persistence Features (Medium Priority)
|
|
- Persistent npm cache for faster startups
|
|
- Git configuration persistence
|
|
- Custom shell aliases and environment
|
|
|
|
## Direction & Vision
|
|
**Security-First Autonomous Environment:**
|
|
- Maintain full Claude autonomy within projects
|
|
- Add network security layer to prevent unauthorized access
|
|
- Enhance user experience with persistent shell history
|
|
- Keep container lightweight and fast
|
|
- Ensure easy setup and maintenance
|
|
|
|
## Decisions Log
|
|
- Using MCP (Model Context Protocol) for Twilio integration instead of direct API
|
|
- Single container approach (no Docker Compose needed)
|
|
- API keys via .env file
|
|
- Context persistence via scratchpad.md files
|
|
- Simplified settings.json to only include MCP config (no redundant allowedTools)
|
|
- **NEW:** Adding firewall for network security
|
|
- **NEW:** Adding shell history persistence like Claude dev container
|
|
- **NEW (2024-12-06):** Focus on auth persistence first before firewall implementation
|
|
- **COMPLETED (2024-12-06):** Auth persistence via mounted ~/.claude directory
|
|
|
|
## Notes & Context
|
|
- Repository: https://github.com/VishalJ99/claude-docker
|
|
- Using --dangerously-skip-permissions flag for full autonomy
|
|
- Twilio MCP server runs via Claude's MCP config (not as separate process)
|
|
- Uses @twilio-alpha/mcp package with API Key/Secret authentication
|
|
- Container auto-removes on exit for clean state
|
|
- Project directory mounted at /workspace
|
|
- Need to research Claude dev container's init-firewall.sh implementation
|
|
- Need to research their history persistence mechanism
|
|
- **Fixed startup issues:**
|
|
- Changed executable from `claude-code` to `claude` in startup.sh
|
|
- Fixed .env parsing to handle comments properly using `set -a`/`source`
|
|
- Added explicit PATH for npm global binaries
|
|
- Maintained separation: `claude-docker` (host) vs `claude` (container)
|
|
- **Current working state:** Container launches successfully, authentication required each session
|
|
- **Auth Persistence Research (2024-12-06):**
|
|
- Claude Code has known issues with auth persistence
|
|
- Tokens stored in temp locations that get cleared
|
|
- Need to find exact token storage location and persist it
|
|
|
|
## MCP Integration Update (2024-12-17)
|
|
|
|
### ✅ COMPLETED: Simplified Twilio MCP Integration
|
|
|
|
**What Changed:**
|
|
1. **Switched MCP Server:** From `@twilio-alpha/mcp` (API Key/Secret) to `@yiyang.1i/sms-mcp-server` (Auth Token)
|
|
2. **Simplified Configuration:** MCP setup now happens during Docker build instead of runtime
|
|
3. **Removed Complexity:** No more mcp-config.json or environment variable substitution
|
|
|
|
**Implementation Details:**
|
|
1. **Updated .env.example:**
|
|
- Removed: `TWILIO_API_KEY` and `TWILIO_API_SECRET`
|
|
- Added: `TWILIO_AUTH_TOKEN`
|
|
- Kept: `TWILIO_ACCOUNT_SID`, `TWILIO_FROM_NUMBER`, `TWILIO_TO_NUMBER`
|
|
|
|
2. **Updated Dockerfile:**
|
|
- Removed global installation of `@twilio-alpha/mcp`
|
|
- Added MCP configuration during build using `claude mcp add-json` command
|
|
- MCP server is configured if Twilio credentials are present in .env
|
|
|
|
3. **Simplified startup.sh:**
|
|
- Removed all MCP configuration logic
|
|
- Just loads environment variables and starts Claude
|
|
- Shows Twilio status on startup
|
|
|
|
4. **Removed Files:**
|
|
- `config/mcp-config.json` (no longer needed)
|
|
- `config/` directory (now empty)
|
|
|
|
**Result:**
|
|
- MCP configuration is baked into the Docker image at build time
|
|
- No runtime configuration needed
|
|
- Simpler, more reliable setup
|
|
- SMS capability available via `twilio__send_text` command
|
|
|
|
## Quick References
|
|
- Install: `./scripts/install.sh`
|
|
- Usage: `claude-docker` (from any project directory)
|
|
- Config: `~/.claude-docker/.env`
|
|
- Repo: https://github.com/VishalJ99/claude-docker
|
|
- Claude dev container: https://github.com/anthropics/claude-code/tree/main/.devcontainer |