Files
automaker/docs/docker-isolation.md
Illia Filippov abc55cf5e9 feat: add Docker containerization for isolated execution & docs
Provide Docker Compose configuration allowing users to run Automaker
in complete isolation from their host filesystem, addressing security
concerns about AI agents having direct system access.
2025-12-20 01:49:06 +01:00

2.0 KiB

Docker Isolation Guide

This guide covers running Automaker in a fully isolated Docker container. For background on why isolation matters, see the Security Disclaimer.

Quick Start

  1. Set your API key (create a .env file in the project root):

    # Linux/Mac
    echo "ANTHROPIC_API_KEY=your-api-key-here" > .env
    
    # Windows PowerShell
    Set-Content -Path .env -Value "ANTHROPIC_API_KEY=your-api-key-here" -Encoding UTF8
    
  2. Build and run:

    docker-compose up -d
    
  3. Access Automaker at http://localhost:3007

  4. Stop:

    docker-compose down
    

How Isolation Works

The default docker-compose.yml configuration:

  • Uses only Docker-managed volumes (no host filesystem access)
  • Runs as a non-root user
  • Has no privileged access to your system

Projects created in the UI are stored inside the container at /projects and persist across restarts via Docker volumes.

Mounting a Specific Project

If you need to work on a host project, create docker-compose.project.yml:

services:
  server:
    volumes:
      - ./my-project:/projects/my-project:ro # :ro = read-only

Then run:

docker-compose -f docker-compose.yml -f docker-compose.project.yml up -d

Tip: Use :ro (read-only) when possible for extra safety.

Troubleshooting

Problem Solution
Container won't start Check .env has ANTHROPIC_API_KEY set. Run docker-compose logs for errors.
Can't access web UI Verify container is running with docker ps | grep automaker
Need a fresh start Run docker-compose down && docker volume rm automaker_automaker-data && docker-compose up -d --build