Claude YOLO Environment

This skill enables you to work effectively in the claude-yolo Docker-based Claude Code environment - a sandbox designed for maximum autonomy with maximum safety. The environment protects both the host machine and inexperienced users from well-intentioned but potentially dangerous actions.

Environment Overview

**Purpose:** Safe, isolated development environment for demos, experiments, and remote work

**Target Users:**

**Key Features:**

Available Tools

**Core Development:** git, gh, jq, ripgrep, vim, nano, tmux, htop, tree

**Cloud Platforms:** aws, az (Azure), gcloud

**Container Orchestration:** kubectl, helm, k9s, docker, docker-compose

**Infrastructure as Code:** terraform/tofu, tfsec

**Databases:** psql, mysql, redis-cli, mongosh

**Python Ecosystem:** uv (primary package manager), ruff, mypy, pytest, bandit, pre-commit

**Security Tools:** gitleaks, detect-secrets, trivy

**Networking:** tailscale, openvpn, cloudflared, ttyd

**Build Tools:** make, cmake, gcc/g++, Node.js 20

File Structure

```

claude-yolo/

├── src/claude_yolo/ # Python package (CLI tool)

├── terraform/ # Infrastructure as Code

│ └── azure/ # Azure deployment modules

│ ├── acr/ # Azure Container Registry

│ ├── aci/ # Azure Container Instances

│ ├── vm/ # Azure Virtual Machines

│ └── scripts/ # Helper scripts

├── examples/ # Demo applications

├── demos/ # Sales engineering demos

├── docs/ # Documentation

├── tests/ # Test suite

└── .github/workflows/ # CI/CD pipelines

```

Safety Constraints

Container Isolation

Git Safety Hooks

Pre-commit Framework

Logging System

All operations are logged to shared volumes:

Claude Code Mode

File Boundaries

**Safe to edit:**

**Read-only:**

**Never touch:**

Volume Mounts

**Important:** Files created in bind mounts are owned by UID 1001. On Linux, you may need to adjust ownership with `sudo chown -R $USER ./home` if needed.

Networking Modes

The container supports two networking modes. **Recommend the appropriate mode based on user needs:**

Mode 1: Bridge Networking (Default)

Mode 2: Host Networking (For MCP OAuth)

**MCP OAuth Note:** Claude Code uses random ephemeral ports (49152-65535) for OAuth callbacks. Exposing this full range causes container startup hangs and extreme resource consumption.

**Decision Tree:**

Azure Infrastructure

OpenTofu/Terraform modules for deploying claude-yolo to Microsoft Azure:

Available Modules

**ACR (Azure Container Registry):**

**ACI (Azure Container Instances):**

**VM (Virtual Machines):**

Quick Deploy Workflow

```bash

1. Deploy ACR

cd terraform/azure/acr

tofu init && tofu apply

2. Push image to ACR

cd ../scripts

./push-to-acr.sh --terraform-dir ../acr --project-dir /path/to/project

3. Deploy to ACI or VM

cd ../aci # or ../vm

tofu init && tofu apply

```

Demo Resources

Common Commands

```bash

Set up safety features for a new project

/home/developer/scripts/setup-project-safety.sh /workspace/my-project

View logs

tail -f /logs/safety/checks.log

tail -f /logs/git/operations.log

tail -f /logs/commands/bash_history.log

Python projects (use uv as primary package manager)

uv init .

uv add <package>

uv run pytest

Azure deployment

cd terraform/azure/aci

tofu init && tofu apply

```

Development Approach

When working in this repository:

1. **Infrastructure Focus** - Changes typically involve Dockerfile, docker-compose, or shell scripts

2. **Safety First** - Every new capability should consider security implications

3. **User Protection** - Target users may be inexperienced; protect them from foot-guns

4. **Balance** - Maximum Claude Code autonomy within safety constraints

5. **Logging** - Ensure new features log appropriately for transparency

6. **Documentation** - Keep CLAUDE.md and README.md updated

Important Constraints

Future Roadmap

**Cloud Support:**

See `terraform/azure/README.md` for comprehensive Azure documentation.