Hey, it's not well known but Anthropic actually publishes their own devcontainer feature layer for this (1). Many different CLI wrappers and tools are starting to imbed it (2) but is a nice DIY/open-source way to sandbox.

1. https://github.com/anthropics/devcontainer-features 2. shameless plug, my own open-source CLI for doing this: https://github.com/smithclay/claudetainer