docker/sbx-kit-claude-ollama repository overview

⁠claude-ollama

A fork of the built-in claude agent that routes all API calls to a local Ollama⁠ instance instead of Anthropic's API. Useful for offline development, cost-free experimentation, or testing with custom local models.

⁠Usage

sbx run "docker.io/docker/sbx-kit-claude-ollama:latest" ~/my-project

Or from a git URL or a local clone of this repo:

sbx run "git+https://github.com/docker/sbx-kits-contrib.git#dir=claude-ollama" ~/my-project
sbx run ./claude-ollama/ ~/my-project

The workload reference passed to sbx run identifies the kit. A v3 descriptor carries no name: field; its matchable name is the claude-ollama entry under provides.

That name is also why the six requires: ["claude"] mixins in this repo do not compose onto this kit: it provides claude-ollama, which is exactly the boundary the v2 kit's own agent name drew.

The default model is gemma4:e4b-it-q4_K_M. To use a different model, override CLAUDE_OLLAMA_MODEL per sandbox, or fork this kit and change the ENV default in claude-ollama.dockerfile⁠.

For the same wiring as an overlay you can layer onto a base you want to keep, see claude-ollama-mixin⁠.

⁠What changed vs the built-in claude

Instead of calling api.anthropic.com, a wrapper script replaces the entrypoint. Under v3 the entrypoint lives in the image config, where OCI already carries the runtime contract, so the swap happens in the recipe:

-ENTRYPOINT ["claude", "--dangerously-skip-permissions"]
+ENTRYPOINT ["/home/agent/.local/bin/claude-ollama"]

The wrapper itself is written by a lifecycle files: entry, which the runtime lands before the entrypoint first runs.

The wrapper script:

1. Sets ANTHROPIC_BASE_URL to http://host.docker.internal:11434 (Ollama via Docker's host bridge)
2. Uses a dummy ANTHROPIC_AUTH_TOKEN — Ollama doesn't require real credentials
3. Maps every Claude model alias (Opus, Sonnet, Haiku, sub-agent) to $CLAUDE_OLLAMA_MODEL
4. Calls exec claude "$@" — the real Claude Code CLI takes over from there

Reference: ollama/ollama — cmd/launch/claude.go⁠

Network access is restricted to host.docker.internal:11434 only — that hostname, not localhost, is what egress filtering sees — and no Anthropic API domain is reachable. The port suffix is kept deliberately rather than following this repo's portless house style: host.docker.internal is the host itself, so dropping it would widen the grant from one local model server to every port the host has open.