Skip to main content
Run Claude Code in a fully isolated Docker container with sing-box TUN transparent proxy and cac identity protection. See the Docker mode guide for detailed setup instructions.

​
Commands

CommandDescription
cac docker setupConfigure proxy and network (interactive)
cac docker startStart the container
cac docker stopStop the container
cac docker restartRestart the container
cac docker enterShell into the container
cac docker checkNetwork + identity diagnostics
cac docker port <port>Forward a port to localhost
cac docker statusShow container status
cac docker logsView container logs
cac docker destroyRemove container and network

​
Proxy formats

Docker mode supports share links in addition to compact format: 
ip:port:user:pass          # compact (SOCKS5)
ss://...                   # Shadowsocks
vmess://...                # VMess
vless://...                # VLESS
trojan://...               # Trojan

​
Network modes

ModeWhenHow
Remote (macvlan)Linux server with Docker EngineContainer gets its own IP on the LAN, completely bypasses host network stack
Local (bridge)Laptop with Docker DesktopContainer uses Docker bridge network, proxy traffic is encrypted
Mode is auto-detected based on your Docker installation.