fix: enable Codex sandbox in Docker

2026-07-20 16:19:59 +02:00
parent 14737db853
commit a12229a147
5 changed files with 70 additions and 6 deletions
@@ -76,7 +76,10 @@ loopback destinations remain blocked. Codex's interactive Git trust check is
 skipped because every turn runs non-interactively against a service-owned clone;
 the configured filesystem and network permissions still apply. Git credentials
 exist only in the service-owned clone/push subprocess and are not inherited by
-Codex turns.
+Codex turns. The image and Compose capability/security settings let the non-root
+service create Codex's nested `bwrap` sandbox. They follow Codex's secure
+devcontainer pattern instead of making the service container privileged. Do not
+remove Codex's configured filesystem and network restrictions.

 ## State and recovery