The Linux version seems to use bubblewrap + seccomp for a "workspace sandbox" automatically, in addition to the auto mode and/or user approval.

A VM would be even better, but people could presumably run this in one if we manage to convince them of higher sandboxing in general ?

▲

bloak 2 hours ago | parent | next [-]

Bubblewrap gets a bit confused inside a Docker container. If anyone knows how to run Codex inside a Docker container on Linux without it constantly complaining about a broken bubblewrap, please tell.

	▲	embedding-shape 2 hours ago \| parent [-]
		> If anyone knows how to run Codex inside a Docker container on Linux without it constantly complaining about a broken bubblewrap, please tell. Why would you even use bubblewrap once it's running in a container? I've been running Codex in a container since it was publicly available, not even sure what you'd use bubblewrap for when you already separated codex from the rest of your filesystem?

▲

justincormack 3 hours ago | parent | prev [-]

The cli does that already with codex on linux