community postAL Developmentcommunity - not Microsoftreviewed - checked by Opus

Building a Plug & Play Claude Code Dev Container for AL Development

Describes building a reusable dev container feature, distributed via GHCR, that installs Claude Code for AL work. Named Docker volumes keep authentication across rebuilds, and stripped git credentials stop Claude Code, running with bypassed permissions, from reaching GitHub. Next steps are AL-specific Claude configuration and moving to Anthropic's official firewall-based dev container.

post Stefan Maron

Stefan Maron · 2026-02-20 · 1,454 words · about 7 min

"That level of autonomous handling still surprises me a bit. You don't get that with Copilot."

Key points

  • Named Docker volumes store Claude Code credentials and config persistently, eliminating need to re-authenticate after container rebuilds
  • Git credentials are stripped via environment variables to prevent Claude Code from accessing GitHub, with VS Code GitHub auth also disabled
  • Dev Container Features distribute the setup as a composable, shareable unit via GHCR instead of manual Dockerfile copying
  • Debugging involved comparing directory snapshots before and after onboarding to identify that ~/.claude.json outside the mount scope blocked authentication persistence
  • Anthropic maintains an official dev container with network-level firewall isolation that can serve as a better foundation than custom solutions

Quotes

  • “That level of autonomous handling still surprises me a bit. You don’t get that with Copilot.” (Demonstrates Claude Code’s autonomous problem-solving capabilities beyond what traditional AI assistants offer, particularly in fixing deployment issues independently)
  • “A dev container is the right sandbox. If Claude Code decides to do something destructive, it destroys the container - not your machine.” (Explains the security model that makes running Claude Code with bypassed permissions safe through containerization isolation)

Context

  • Features: Claude Code integration, dev container features, persistent authentication, git credential stripping, voice prompting, named Docker volumes, network isolation

Source: Stefan Maron, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.