- Change DinD detection from AND to OR: require both env vars or neither
(partial config would cause confusing mount failures)
- Add comment explaining why root user is required for Docker socket access
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
When the gateway runs inside a Docker container and creates sandbox
containers, volume mount paths need to be host paths, not container paths.
Changes:
- Add remapPathForDinD() function to remap container paths to host paths
- Add CLAWDBOT_SANDBOX_HOST_CONFIG_DIR and CLAWDBOT_SANDBOX_HOST_WORKSPACE_DIR
environment variables to docker-compose.yml
- Use path remapping in both sandbox container and browser sandbox creation
- Add Docker CLI to gateway Dockerfile for Docker-in-Docker support
The path remapping is a no-op when the environment variables are not set,
so bare metal installations are unaffected.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
When running gateway in Docker, it needs access to the Docker socket
to create and manage sandbox browser containers on the host.
Changes:
- Add user: root for Docker socket permissions
- Mount /var/run/docker.sock into gateway container
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
