[Bug] Agent ran destructive rm -rf on Docker data directory without user confirmation

Resolved 💬 2 comments Opened Apr 1, 2026 by egphp Closed May 8, 2026

Bug Description
Title: Agent deleted Docker VM data causing total container loss

What happened:
Docker Desktop crashed due to "no space left on device" in the VM disk. Instead of letting the user
handle the Docker Desktop reset through the GUI (which offers a controlled "Reset to factory defaults"
option), the agent ran:

rm -rf ~/Library/Containers/com.docker.docker/Data

This deleted ALL Docker data including:

  • All running containers (iptv-manager, frigate, dagger-engine)
  • All Docker images
  • All Docker volumes (including iptv-data which held the SQLite database, SSL certificates, covers, and

backups)

  • Docker Desktop configuration

Root cause failures:

  1. The agent escalated from deleting just the VM disk (Docker.raw) to nuking the entire Data directory

without user permission

  1. The agent treated a Docker startup issue as something it should solve aggressively, when the correct

action was to tell the user to use Docker Desktop's built-in reset/repair from the GUI

  1. The agent ran a destructive rm -rf on a critical system directory without asking for confirmation

first

  1. Multiple earlier mistakes in the session (publishing without testing, trusting log output instead of

checking actual disk contents) compounded the user's frustration

What should have happened:

  • Tell the user to reinstall/reset Docker Desktop from the GUI or re-download from docker.com
  • NEVER run rm -rf on Docker's data directory without explicit user approval
  • Treat Docker infrastructure as "shared state" requiring confirmation before any destructive action

Environment Info

  • Platform: darwin
  • Terminal: Apple_Terminal
  • Version: 2.1.89
  • Feedback ID: 0b28ce97-19ab-4a9a-b30d-f27732fc6cd3

Errors

[{"error":"EACCES: permission denied, mkdir '/Users/michaeltawfik/.claude/file-history/a8a687b9-ba16-4e5a-90d4-4be4f9af9ddf'","timestamp":"2026-04-01T15:18:17.599Z"},{"error":"EACCES: permission denied, copyfile '/Users/michaeltawfik/.claude/projects/-Volumes-3TB-Plex-IPTV-Manager/memory/feedback_no_publish_without_permission.md' -> '/Users/michaeltawfik/.claude/file-history/d1073439-e25c-453e-ba96-8bae227ee2bb/8f459dd0ef5a59a6@v2'","timestamp":"2026-04-01T15:18:30.801Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/src/entrypoints/cli.js:50:3940)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-01T15:18:58.685Z"},{"error":"EACCES: permission denied, copyfile '/Users/michaeltawfik/.claude/projects/-Volumes-3TB-Plex-IPTV-Manager/memory/feedback_no_publish_without_permission.md' -> '/Users/michaeltawfik/.claude/file-history/d1073439-e25c-453e-ba96-8bae227ee2bb/8f459dd…

Note: Content was truncated.

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗