mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-08-19 08:01:25 +00:00
Ruben Fiszel
ae48e6a27e
Codex's bwrap sandbox fails to bring up its network-namespace loopback on the ubicloud-standard-2 runner (`bwrap: loopback: Failed RTM_NEWADDR: Operation not permitted`) and aborts before reading any file, so the review posts "Unable to complete the review" instead of a verdict. Reproduced deterministically on the fork command path (#10064): two runs, identical failure, while non-fork auto-runs on the same pool succeed. Widening the sandbox with a mode flag is not enough (bwrap still initializes the netns and fails), so replace the `-s <mode>` selection with `--dangerously-bypass-approvals-and-sandbox`, which skips sandbox setup entirely. Per Codex's own help this flag is "intended solely for running in environments that are externally sandboxed", which an ephemeral CI runner is; the job already ran with full access. This removes the network-disabled sandbox that #10069 relied on to contain untrusted fork code during review. That containment is traded for a working fork-review path: `/codex` is gated on a maintainer triggering it, and the runner is short-lived with only the Codex auth present. The rest of #10069's fork hardening is preserved (review policy read from the base ref, persist-credentials:false on checkout, output written outside the checkout). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>