Rank, 14 days: 17 on the Claude Code sheet
20 people reported
All time, since Sep 27, including 12 thumbs-up on GitHub.
Linux sandbox fails every command
“Bug report draft: Claude Code Linux sandbox fails with apply-seccomp setgroups error”
Is this your bug? What gets counted gets fixed. Pile on.
Paste this into your agent. It files your report, with your error and version.
I hit this bug: rapsheet.dev/sheets/claude-code/themes/230/file Follow it to file my report. Show me the text before you send.
No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends
3 bugs in this theme
- Sandbox apply-seccomp setgroups failureHas a workaround14 people
- Eval sandbox blocks workspace writesNo workaround yet3 people
- Sandbox read-only bind breaks BashNo workaround yet3 people
What's included
- bwrap exits with "Read-only file system" when a read-only bind covers the working directory
- allowRead on a parent directory, or the env-scrub deny list on a self-hosted Actions runner, makes the workspace read-only
- apply-seccomp setgroups "Permission denied" on Ubuntu 26.04 with the stock bwrap-userns-restrict AppArmor profile
- claude plugin eval runs score 0 because sandboxed Bash cannot write the /tmp workspace
Not included
- Git over SSH failing through the sandbox proxy
- Placeholder files left in .git that break git config or other tools
- sandbox.excludedCommands not exempting listed commands
Original reports8, newest first
- plugin eval on Linux: run sandbox denies writes to its own working directory when TMPDIR is under /tmp#106687
- Sandbox fails on Ubuntu 26.04: AppArmor bwrap-userns-restrict profile denies CAP_SYS_ADMIN#105194
- plugin eval: sandboxed Bash cannot write the run workspace when TMPDIR is under /tmp ("Read-only file system")#104797
- plugin eval (Linux, 2.1.304–2.1.309): sandbox denies every write in the agent's workspace — //tmp denyWrite covers the /tmp/claude-eval-* root#104631
- Sandbox: allowRead on a parent of the working directory breaks all Bash commands ("Read-only file system")#103955
- Linux sandbox fails: apply-seccomp setgroups "Permission denied" on Ubuntu 26.04#101946
- claude plugin eval: every Bash call fails on stock Ubuntu (apply-seccomp setgroups, #43454) and the sandbox settings workaround cannot be applied#99269
- 2.1.281: CLAUDE_CODE_SUBPROCESS_ENV_SCRUB sandbox denies $HOME/actions-runner, so every Bash call fails on a default self-hosted GitHub Actions runner#97730