From ralph-town
Daytona sandbox troubleshooting. Use for known issues, common mistakes, workarounds.
How this skill is triggered — by the user, by Claude, or both
Slash command
/ralph-town:sandbox-troubleshootingThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
| Issue | Workaround |
| Issue | Workaround |
|---|---|
| SSH PATH broken | Use full paths: /usr/bin/git, /usr/bin/gh |
exec returns -1 on snapshots | Use SSH instead (Daytona bug #2283) |
Work dir is /home/daytona | Not /workspaces |
| SSH exit code 255 | Ignore - check output, not exit code |
--env vars not in SSH | Team-lead sets credentials before spawning |
Upstream: daytonaio/daytona#2283
ralph-town sandbox createralph-town sandbox create --snapshot ralph-town-devSnapshot has gh, git, bun pre-installed.
ralph-town sandbox exec <id> -- git statusssh <token>@ssh.app.daytona.io "/usr/bin/git status"exec returns -1 on snapshots (known bug).
git clone .../usr/bin/git clone ...PATH is broken in SSH sessions.
SSH sessions don't inherit --env vars.
ssh ... '/bin/echo "https://oauth2:$GH_TOKEN@..."'ssh ... "/bin/echo 'https://oauth2:$GH_TOKEN@...'"Single quotes prevent local expansion.
git clone https://[email protected]/.../usr/bin/git config --global credential.helper store
/bin/echo "https://oauth2:[email protected]" > ~/.git-credentials
Tokens in URLs leak to process list, logs, error messages.
| Tool | Path |
|---|---|
| git | /usr/bin/git |
| gh | /usr/bin/gh |
| bun | /root/.bun/bin/bun |
| ls, cat, echo | /bin/ls, /bin/cat, /bin/echo |
| curl | /usr/bin/curl |
npx claudepluginhub spences10/ralph-town --plugin ralph-townEnables secure execution of untrusted Python/Node.js code, git operations, and scripts in persistent Linux containers on Cloudflare edge using Workers SDK.
Launch an interactive shell inside a microsandbox for debugging agent auth, environment, and workspace setup. Supports bare, executor, and judge modes with optional test case scaffolding.
Guides Claude Code sandbox configuration for filesystem/network isolation, OS enforcement (bubblewrap/Seatbelt), proxies, escape hatches, and troubleshooting via docs-management delegation.