A developer frustrated by constant permission prompts in Claude Code used the `--dangerously-skip-permissions` flag to automate tasks. To avoid filesystem damage, they explored isolation options. Docker-in-Docker required privileged mode, which compromised security. Other sandboxing tools like Firejail or manual VMs were either insufficient or too tedious for a reproducible setup.

They settled on Vagrant with VirtualBox for full VM isolation, avoiding Docker-in-Docker complexities. After battling a VirtualBox 7.2.4 CPU bug, they created a simple Vagrantfile. This provisions an Ubuntu VM with Docker, Node.js, and the Claude Code agent, syncing the project folder for a local feel. The setup allows the AI unrestricted system access within the sandbox.

With `sudo` privileges in the VM, Claude Code can now install packages, modify configs, run Docker containers, and build web apps without host risk. This accelerates development by removing permission bottlenecks. The author notes the solution is for preventing accidents, not blocking sophisticated attacks, and recommends the approach for anyone using Claude's dangerous flag.