mirror of
https://github.com/openai/codex.git
synced 2026-04-26 15:45:02 +00:00
f956cc2a02
## Summary Vendor Bubblewrap into the repo and add minimal build plumbing in `codex-linux-sandbox` to compile/link it. ## Why We want to move Linux sandboxing toward Bubblewrap, but in a safe two-step rollout: 1) vendoring/build setup (this PR), 2) runtime integration (follow-up PR). ## Included - Add `codex-rs/vendor/bubblewrap` sources. - Add build-time FFI path in `codex-rs/linux-sandbox`. - Update `build.rs` rerun tracking for vendored files. - Small vendored compile warning fix (`sockaddr_nl` full init). follow up in https://github.com/openai/codex/pull/9938
52 lines
1.6 KiB
Markdown
52 lines
1.6 KiB
Markdown
bubblewrap 0.11.0
|
|
=================
|
|
|
|
Released: 2024-10-30
|
|
|
|
Dependencies:
|
|
|
|
* Remove the Autotools build system. Meson ≥ 0.49.0 is now required
|
|
at build-time. (#625, Hugo Osvaldo Barrera)
|
|
|
|
* For users of bash-completion, bash-completion ≥ 2.10 is recommended.
|
|
With older bash-completion, bubblewrap might install completions
|
|
outside its `${prefix}` unless overridden with `-Dbash_completion_dir=…`.
|
|
|
|
Enhancements:
|
|
|
|
* New `--overlay`, `--tmp-overlay`, `--ro-overlay` and `--overlay-src`
|
|
options allow creation of overlay mounts.
|
|
This feature is not available when bubblewrap is installed setuid.
|
|
(#412, #663; Ryan Hendrickson, William Manley, Simon McVittie)
|
|
|
|
* New `--level-prefix` option produces output that can be parsed by
|
|
tools like `logger --prio-prefix` and `systemd-cat --level-prefix=1`
|
|
(#646, Simon McVittie)
|
|
|
|
Bug fixes:
|
|
|
|
* Handle `EINTR` when doing I/O on files or sockets (#657, Simon McVittie)
|
|
|
|
* Don't make assumptions about alignment of socket control message data
|
|
(#637, Simon McVittie)
|
|
|
|
* Silence some Meson deprecation warnings (#647, @Sertonix)
|
|
|
|
* Update URLs in documentation to https (#566, @TotalCaesar659)
|
|
|
|
* Improve tests' compatibility with busybox (#627, @Sertonix)
|
|
|
|
* Improve compatibility with Meson < 1.3.0 (#664, Simon McVittie)
|
|
|
|
Internal changes:
|
|
|
|
* Consistently use `<stdbool.h>` for booleans (#660, Simon McVittie)
|
|
|
|
* Avoid `-Wshadow` compiler warnings (#661, Simon McVittie)
|
|
|
|
* Update Github Actions configuration (#658, Simon McVittie)
|
|
|
|
----
|
|
|
|
See also <https://github.com/containers/bubblewrap/releases>
|