viyatb-oai ae4de43ccc feat(linux-sandbox): add bwrap support (#9938) ...

## Summary
This PR introduces a gated Bubblewrap (bwrap) Linux sandbox path. The
curent Linux sandbox path relies on in-process restrictions (including
Landlock). Bubblewrap gives us a more uniform filesystem isolation
model, especially explicit writable roots with the option to make some
directories read-only and granular network controls.

This is behind a feature flag so we can validate behavior safely before
making it the default.

- Added temporary rollout flag:
  - `features.use_linux_sandbox_bwrap`
- Preserved existing default path when the flag is off.
- In Bubblewrap mode:
- Added internal retry without /proc when /proc mount is not permitted
by the host/container.

ae4de43ccc · 2026-02-04 11:13:17 -08:00

History

..

src

Handle exec shutdown on Interrupt (fixes immortal codex exec with websockets) (#10519)

2026-02-03 14:38:21 -08:00

tests

feat(linux-sandbox): add bwrap support (#9938)

2026-02-04 11:13:17 -08:00

BUILD.bazel

feat: add support for building with Bazel (#8875)

2026-01-09 11:09:43 -08:00

Cargo.toml

feat: replace custom mcp-types crate with equivalents from rmcp (#10349)

2026-02-02 17:41:55 -08:00