codex/codex-rs/vendor/bubblewrap/ci/enable-userns.sh at e51a0bfa77d950e8c4e43cd8a546f4e9e4af58c1 - codex - Gitea: Git with a cup of tea

clone/codex

mirror of https://github.com/openai/codex.git synced 2026-04-26 07:35:29 +00:00

Files

viyatb-oai f956cc2a02 feat(linux-sandbox): vendor bubblewrap and wire it with FFI (#10413 )

## Summary

Vendor Bubblewrap into the repo and add minimal build plumbing in
`codex-linux-sandbox` to compile/link it.

## Why

We want to move Linux sandboxing toward Bubblewrap, but in a safe
two-step rollout:
1) vendoring/build setup (this PR),  
2) runtime integration (follow-up PR).

## Included

- Add `codex-rs/vendor/bubblewrap` sources.
- Add build-time FFI path in `codex-rs/linux-sandbox`.
- Update `build.rs` rerun tracking for vendored files.
- Small vendored compile warning fix (`sockaddr_nl` full init).

follow up in https://github.com/openai/codex/pull/9938

2026-02-02 23:33:46 -08:00

7 lines

124 B

Bash

Executable File

Raw Blame History

 #!/bin/bash
 set -e
 echo "kernel.apparmor_restrict_unprivileged_userns = 0" > /etc/sysctl.d/99-userns.conf
 sysctl --system