From bfa13257ff6b6fa43b6b29e50e85fcd249bcc057 Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Fri, 10 Jul 2026 14:19:09 +0200
Subject: [PATCH] Fix Claude terminal build and runtime safety

---
 claude_desktop/Dockerfile | 17 +++++++++++++++--
 1 file changed, 15 insertions(+), 2 deletions(-)

diff --git a/claude_desktop/Dockerfile b/claude_desktop/Dockerfile
index f46dcee1f7..873fffe11a 100644
--- a/claude_desktop/Dockerfile
+++ b/claude_desktop/Dockerfile
@@ -66,11 +66,24 @@ RUN install -d -m 0755 /etc/apt/keyrings && \
         git \
         gh \
         ripgrep \
-        tmux \
-        ttyd && \
+        tmux && \
     apt-get clean && \
     rm -rf /var/lib/apt/lists/*
 
+# ttyd is not packaged in Debian bookworm. Install the pinned upstream static binary.
+ARG TTYD_VERSION="1.7.7"
+RUN set -eux; \
+    case "$(dpkg --print-architecture)" in \
+        amd64) ttyd_arch="x86_64" ;; \
+        arm64) ttyd_arch="aarch64" ;; \
+        *) echo "Unsupported architecture for ttyd: $(dpkg --print-architecture)" >&2; exit 1 ;; \
+    esac; \
+    curl -fsSL --retry 3 --retry-delay 2 \
+        -o /usr/local/bin/ttyd \
+        "https://github.com/tsl0922/ttyd/releases/download/${TTYD_VERSION}/ttyd.${ttyd_arch}"; \
+    chmod 0755 /usr/local/bin/ttyd; \
+    /usr/local/bin/ttyd --version
+
 # Install token-optimization tool prerequisites and binaries at build time
 RUN apt-get update && \
     apt-get install -y --no-install-recommends nodejs && \