Skip to content

Fix/apple container mounts#1010

Open
vzaliva wants to merge 2 commits intoqwibitai:skill/apple-containerfrom
vzaliva:fix/apple-container-mounts
Open

Fix/apple container mounts#1010
vzaliva wants to merge 2 commits intoqwibitai:skill/apple-containerfrom
vzaliva:fix/apple-container-mounts

Conversation

@vzaliva
Copy link
Copy Markdown

@vzaliva vzaliva commented Mar 12, 2026

Type of Change

  • Skill - adds a new skill in .claude/skills/
  • Fix - bug fix or security fix to source code
  • Simplification - reduces or simplifies source code

Description

Two fixes for Apple Container compatibility:

1. Dynamic host gateway IP detection

The credential proxy was configured with a hardcoded host.docker.internal hostname,
which Apple Container VMs cannot resolve. Instead, detect the host IP at runtime by
scanning for the bridge interface Apple Container creates on the host. Falls back to
127.0.0.1 with a warning if no bridge interface is found.

2. Skip /dev/null bind mount on Apple Container

Apple Container only supports directory bind mounts — mounting a character device
(/dev/null) or regular file fails with "path is not a directory". The .env
shadowing mount is now skipped when running under Apple Container. Secrets remain
secure as they are always injected via the credential proxy, never from the mounted
filesystem.

For Skills

(not applicable)

vzaliva and others added 2 commits March 12, 2026 11:47
Two fixes for Apple Container compatibility:

1. Detect the host IP dynamically by scanning for bridge interfaces
   created by Apple Container, instead of hardcoding an IP. Falls back
   to 127.0.0.1 if no bridge interface is found.

2. Skip /dev/null bind mount for .env shadowing on Apple Container —
   it only supports directory bind mounts, not file or device mounts.
   Secrets remain secure as they are injected via the credential proxy.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR: Fix Bug fix Status: Needs Review Ready for maintainer review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants