--cap-add=NET_ADMIN

--cap-add=NET_RAW

https://github.com/anthropics/claude-code/blob/main/.devcont...

If the cointainer route (with those types of privileges) is being suggested from a security point of view, then might as well run these processes in a VM and call it a day :/