docker has sandboxes for this https://docs.docker.com/ai/sandboxes/

docker sandbox run claude