BlueRock Bridge Connector (26.23.0)

Important:

This guide for BlueRock Bridge Connector is for version 26.23.0 only. For environments running platform version 26.23.1, refer to the BlueRock Bridge Connector (26.23.1 ) documentation for the updated installation steps.

BlueRock Bridge ships the Cobalt application, which enables a remote coding workspace from Claude Desktop IDE by launching and managing bluedev containers onto the BlueRock Host VM and supports SSH logging to the remote bluedev container using SSO or SSH key-based authentication.

Pre-requisites

• Claude Code IDE

• BlueRock Bridge app Cobalt (Contact BlueRock support to get the Cobalt app)

  • For Windows: BlueRock_Cobalt_win64.exe

  • For macOS: BlueRock_Cobalt_macOS.app.zip

Installation (Windows)

Locate Cobalt's BlueRock_Cobalt_win64.exe application and double-click to run it.

Note:

Windows will display a standard publisher notification warning message because the application is not from Microsoft. Proceed through the prompt to install and run the application.

Authentication & Enrollment

Once the application opens, select the Login button at the bottom.

You can log in and enroll using one of two methods:

• SSO (recommended)

• SSH Key

SSO (Google OAuth or Microsoft Entra ID)

Run the following command on the instance to enroll the bluedev bouncer before clicking on the SSO (recommended):

$ sudo bluedev-bouncer enroll --ca <bootstrap-URL> --password

## Enter the BOUNCER_PASSWORD when prompted

1. Select the SSO (Recommended) option within Cobalt.

2. Provide the bootstrap string URL in the Bootstrap URL field. In the following format, and click Sign in:

   https://<identity-example>.com#fp=<sha256-hex>

   
3. Click the Enroll command inside Cobalt. This action automatically redirects you to your web browser for authentication.

4. Complete the sign-in flow in your browser to bring up and authorize Cobalt. Once Cobalt is successfully authenticated, the following log appears.

   

SSH Trust Auth

Select the SSH key login option.

1. Run the following command on the local machine to get the fingerprint (SHA256: <base 64>):

   ssh-keyscan -T 10 -t ed25519 <host-ip> | ssh-keygen -lf - 2>&1

2. Insert the Bootstrap string with the following format:

   <host-ip>#fp=SHA256:<base64>

   For example:

   10.101.01.101#fp=SHA256:0x0x0xx00xxx0xx0000x000xxx000000xx0x0x00x00xx0x000x0000xx000x00x/mU

   Browse and select the required SSH private key.

   

Note:

Ensure the same SSH key is present in the .ssh folder of the instance's Bluedev profile. For that, run the following commands:

## Switch to bluedev user
$ sudo su bluedev

# Create the .ssh directory with correct permissions
$ mkdir -p ~/.ssh
$ chmod 700 ~/.ssh

# Add your local public key to authorized_keys
$ vi ~/.ssh/authorized_keys

# Set secure permissions for the authorized_keys file
$ chmod 600 ~/.ssh/authorized_keys

Environment Lifecycle Management

Note:

BlueRock Bridge (Cobalt) supports a single container environment only.

• Setup Environment: Click Setup Environment to pull and spin up the designated Docker container. Verify that it is running by executing docker ps directly on your BlueRock instance.

• Stop Environment: Click Stop Environment to halt your running container. Verifying the container status on the BlueRock instance will confirm that it has stopped.

• Start Container: If an environment has been stopped but not destroyed, a Start Container option will be available to restart the existing container and preserve its state.

• Destroy Environment: Click Destroy Environment to completely purge and delete the container instance from the host.

System Tools

• Status: Click this button to view diagnostic metadata regarding the active container, including its current state and container ID.

• Show Files: Selecting this option mounts the remote container directory to your local Windows filesystem. This exposes the file structure inside This PC as if it were a local directory.

• Clear Log: Functions similarly to a terminal clear command. It empties the visual logging output console view within Cobalt.

• Reload: Used when shifting workloads from one BlueRock environment to another (for example, transitioning from Instance A to Instance B). If the dashboard interface hangs on a cached IP address from a previous session after re-enrolling, clicking Reload manually refreshes the configuration and pulls down the updated public IP address and configuration settings.

The bluedev Container mounts on the Windows file system under Network Location:

Connecting to Claude Code IDE

To bridge your local Claude IDE environment with the remote container, follow these configuration steps:

1. Manually open your Claude ID application.

2. Click on the Code menu option.

3. Select Local.

   
4. Select Add SSH Host.

   
5. Enter cobalt-59 in the SSH Host field in the hostname prompt.

   
6. Click Add SSH Connection. Any tasks or development scripts created inside this window will now execute directly inside your active remote bluedev Docker container.

   

Note:

OTEL events are generated by the blueclaude_sensor for all the actions done by the coding agent running inside the remote container.