So... who's got the hot guide on running Claude Code isolated in a project-level container of some kind? Doesn't need to be a full-blown VM, but I definitely want to be done letting it have read access to ~.

That's how I run claude code in a container having access to just a mounted volume from my dev machine: https://gist.github.com/fabiant7t/06757e67187775931b0ec6c402...