A couple of people have since tipped me off that this works around that:

  IS_SANDBOX=0 claude --dangerously-skip-permissions

You can run that as root and Claude won't complain.

If you want to run stuff in Docker as root, better enable uid remapping, since otherwise the in-container uid 0 is still the real uid 0 and weakens the security boundary of the containerization.

(Because Docker doesn't do this as by default, best practice is to create a non root user in your dockerfile and run as that)

Correction: it's IS_SANDBOX=1