Claude Code requires non root user in docker containers for dangerously skip permissions

22-03-2026

Root cause: The Claude Code CLI rejects —dangerously-skip-permissions (mapped from permission_mode=“bypassPermissions”) when the process runs as root. All ai_orc containers run as root because no USER directive exists in Dockerfile.app and no —user flag is passed in the Ansible deploy playbook.

• https://code.claude.com/docs/en/devcontainer
  • https://github.com/anthropics/claude-code/blob/main/.devcontainer/Dockerfile
  • https://github.com/anthropics/claude-code/blob/main/.devcontainer/init-firewall.sh - firewall rules
• https://github.com/tintinweb/claude-code-container/blob/master/claude-standalone/Dockerfile
• https://www.solberg.is/claude-devcontainer

Volume mount permissions:

• SSL cert (.crt) — api, mcp, dagster-webserver, orc, ui
• SSL key (.key) — api, mcp, dagster-webserver, orc, ui
• dagster_home — dagster-webserver, daemon, orc