Dockerfile

1# Sandbox for CLI workflow builders. The container sees only the run directory
2# that is mounted at /out. It reaches n8n through host.docker.internal.
3FROM node:26-slim
4
5ARG CLAUDE_CODE_VERSION=latest
6ARG CODEX_VERSION=latest
7
8# Codex uses the system trust store. Claude Code uses the CA list in Node.
9# tmux runs the interactive CLI screens so that they can be recorded and watched.
10# Claude Code (with built-in tools) and Codex use python3, jq and ripgrep in their shell to read large tool results.
11RUN apt-get update \
12	&& apt-get install -y --no-install-recommends ca-certificates tmux python3 jq ripgrep \
13	&& rm -rf /var/lib/apt/lists/*
14
15RUN npm install -g "@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}" "@openai/codex@${CODEX_VERSION}" \
16	&& npm cache clean --force
17
18ENV DISABLE_AUTOUPDATER=1 \
19	DISABLE_TELEMETRY=1 \
20	DISABLE_ERROR_REPORTING=1 \
21	CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1