CLAUDE_CODE_SUBPROCESS_ENV_SCRUB silently overrides sandbox.enabled:false with no warning

[dennisgregory-lab]

Preflight Checklist

• I have searched existing issues and this hasn't been reported yet
• This is a single bug report (please file separate reports for different bugs)
• I am using the latest version of Claude Code

What's Wrong?

Setting CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1 silently forces bubblewrap sandbox activation, overriding sandbox.enabled: false and sandbox.failIfUnavailable: false in settings.json. No warning, no log, and the error produced looks like a kernel capability issue — not a config conflict.

What Should Happen?

sandbox.enabled: false should disable the sandbox. If an env var overrides settings.json, Claude Code should warn the user or document this behavior.

Error Messages/Logs

bwrap: Creating new namespace failed, kernel doesn't support user namespaces: Operation not permitted

Steps to Reproduce

1. Set CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1 in the environment (docker-compose environment block)
2. Set sandbox.enabled: false and sandbox.failIfUnavailable: false in settings.json
3. Attempt to run any Bash tool

Claude Model

None

Is this a regression?

I don't know

Last Working Version

No response

Claude Code Version

2.1.x

Platform

Anthropic API

Operating System

Ubuntu/Debian Linux

Terminal/Shell

Other

Additional Information

Root cause: CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1 forces bubblewrap regardless of sandbox settings. Docker on kernels without user namespace support (Synology NAS, kernel 4.4) cannot use bubblewrap.

Fix: Remove CLAUDE_CODE_SUBPROCESS_ENV_SCRUB from the environment.

Footgun for Docker deployments — silent override + misleading error message + no documentation makes it extremely hard to diagnose.

[github-actions]

Found 3 possible duplicate issues:

1. CLAUDE_CODE_SUBPROCESS_ENV_SCRUB silently overrides sandbox.enabled:false with no warning #50164
2. CLAUDE_CODE_SUBPROCESS_ENV_SCRUB silently overrides sandbox.enabled:false with no warning #50166
3. sandbox.enabled: false setting ignored — bwrap still wraps all Bash commands #35986

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.