toph/claudebox
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: add /bin/sh symlink to sandbox so hooks can exec sh

Browse source 
Claude Code hooks invoke /bin/sh which doesn't exist in the bwrap
sandbox. Symlink bash to /bin/sh alongside the existing /usr/bin/env
symlink so all hook-based tooling (GSD statusline, project hooks)
works correctly inside claudebox.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Christopher Mühl 2026-04-13 09:55:40 +00:00
parent 6eb3b464f5
commit 4baf576810
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
claudebox.sh
View file

@ -361,6 +361,7 @@ if [[ "$DRY_RUN" == true ]]; then
echo " --ro-bind /etc/nsswitch.conf /etc/nsswitch.conf \\" echo " --ro-bind /etc/nsswitch.conf /etc/nsswitch.conf \\"
echo " --ro-bind /etc/nix /etc/nix \\" echo " --ro-bind /etc/nix /etc/nix \\"
printf ' --symlink %q /usr/bin/env \\\n' "$(readlink -f "$(command -v env)")" printf ' --symlink %q /usr/bin/env \\\n' "$(readlink -f "$(command -v env)")"
printf ' --symlink %q /bin/sh \\\n' "$(readlink -f "$(command -v bash)")"
echo " --tmpfs $HOME \\" echo " --tmpfs $HOME \\"
echo " --bind $HOME/.claude $HOME/.claude \\" echo " --bind $HOME/.claude $HOME/.claude \\"
echo " --bind $INSTANCE_DIR $HOME/.claude/projects \\" echo " --bind $INSTANCE_DIR $HOME/.claude/projects \\"
@ -398,6 +399,7 @@ BWRAP_ARGS=(
--ro-bind /etc/nsswitch.conf /etc/nsswitch.conf --ro-bind /etc/nsswitch.conf /etc/nsswitch.conf
--ro-bind /etc/nix /etc/nix --ro-bind /etc/nix /etc/nix
--symlink "$(readlink -f "$(command -v env)")" /usr/bin/env --symlink "$(readlink -f "$(command -v env)")" /usr/bin/env
--symlink "$(readlink -f "$(command -v bash)")" /bin/sh
--tmpfs "$HOME" --tmpfs "$HOME"
# Phase 5: direct ~/.claude bind (D-01) — all plugins/skills/hooks/MCP visible # Phase 5: direct ~/.claude bind (D-01) — all plugins/skills/hooks/MCP visible
--bind "$HOME/.claude" "$HOME/.claude" --bind "$HOME/.claude" "$HOME/.claude"