This is an optional pattern for running Ralph in an isolated container when using dangerous permissions.
docker build -t ralph-sandbox -f docker/Dockerfile .# Default (AMP provider)
docker run --rm -it -v "$PWD:/workspace" -w /workspace ralph-sandbox ./ralph.sh 10
# With a different provider
docker run --rm -it -e RALPH_PROVIDER=claude-code -v "$PWD:/workspace" -w /workspace ralph-sandbox ./ralph.sh 10Notes:
- The container includes
git,jq, andenvsubst, but does NOT install any AI CLI. - Provide your preferred provider's CLI and credentials in the container.
- Set
RALPH_PROVIDERenvironment variable to select the provider (default: amp). - See
config/providers.jsonfor available providers and their configurations.