mirror of
https://github.com/openai/codex.git
synced 2026-04-26 15:45:02 +00:00
f956cc2a02
## Summary Vendor Bubblewrap into the repo and add minimal build plumbing in `codex-linux-sandbox` to compile/link it. ## Why We want to move Linux sandboxing toward Bubblewrap, but in a safe two-step rollout: 1) vendoring/build setup (this PR), 2) runtime integration (follow-up PR). ## Included - Add `codex-rs/vendor/bubblewrap` sources. - Add build-time FFI path in `codex-rs/linux-sandbox`. - Update `build.rs` rerun tracking for vendored files. - Small vendored compile warning fix (`sockaddr_nl` full init). follow up in https://github.com/openai/codex/pull/9938
81 lines
1.2 KiB
Bash
81 lines
1.2 KiB
Bash
# shellcheck shell=bash
|
|
|
|
# bash completion file for bubblewrap commands
|
|
#
|
|
|
|
_bwrap() {
|
|
local cur prev words cword
|
|
_init_completion || return
|
|
|
|
# Please keep sorted in LC_ALL=C order
|
|
local boolean_options="
|
|
--as-pid-1
|
|
--assert-userns-disabled
|
|
--clearenv
|
|
--disable-userns
|
|
--help
|
|
--new-session
|
|
--unshare-all
|
|
--unshare-cgroup
|
|
--unshare-cgroup-try
|
|
--unshare-ipc
|
|
--unshare-net
|
|
--unshare-pid
|
|
--unshare-user
|
|
--unshare-user-try
|
|
--unshare-uts
|
|
--version
|
|
"
|
|
|
|
# Please keep sorted in LC_ALL=C order
|
|
local options_with_args="
|
|
$boolean_optons
|
|
--add-seccomp-fd
|
|
--args
|
|
--argv0
|
|
--bind
|
|
--bind-data
|
|
--block-fd
|
|
--cap-add
|
|
--cap-drop
|
|
--chdir
|
|
--chmod
|
|
--dev
|
|
--dev-bind
|
|
--die-with-parent
|
|
--dir
|
|
--exec-label
|
|
--file
|
|
--file-label
|
|
--gid
|
|
--hostname
|
|
--info-fd
|
|
--lock-file
|
|
--overlay
|
|
--overlay-src
|
|
--perms
|
|
--proc
|
|
--remount-ro
|
|
--ro-bind
|
|
--ro-overlay
|
|
--seccomp
|
|
--setenv
|
|
--size
|
|
--symlink
|
|
--sync-fd
|
|
--tmp-overlay
|
|
--uid
|
|
--unsetenv
|
|
--userns-block-fd
|
|
"
|
|
|
|
if [[ "$cur" == -* ]]; then
|
|
COMPREPLY=( $( compgen -W "$boolean_options $options_with_args" -- "$cur" ) )
|
|
fi
|
|
|
|
return 0
|
|
}
|
|
complete -F _bwrap bwrap
|
|
|
|
# vim:set ft=bash:
|