VS Code extension bundled Codex 0.116 fails on Rocky 8 with bwrap: Unknown option --argv0

What version of the IDE extension are you using?

openai.chatgpt-26.318.11754-linux-x64

What subscription do you have?

Plus

Which IDE are you using?

VS Code Remote SSH

What platform is your computer?

Linux 4.18.0-553.69.1.el8_10.x86_64 x86_64 x86_64

What issue are you seeing?

After updating to the latest VS Code extension, Codex agent mode fails with bwrap: Unknown option --argv0 on Rocky Linux 8.10.

This appears to be a regression in the extension-bundled Codex, because downgrading the extension by one version avoids the problem.

The same error can also be reproduced directly with the extension-bundled Codex binary by running ~/.vscode-server/extensions/openai.chatgpt-26.318.11754-linux-x64/bin/linux-x86_64/codex sandbox linux /bin/true.

What steps can reproduce the bug?

1.Use Rocky Linux 8.10 with /usr/bin/bwrap at version 0.4.0.

2.Update to the latest OpenAI Codex VS Code extension.

3.Open Codex in VS Code and trigger an agent action that uses the Linux sandbox, or run ~/.vscode-server/extensions/openai.chatgpt-26.318.11754-linux-x64/bin/linux-x86_64/codex sandbox linux /bin/true.

4.Observe the error bwrap: Unknown option --argv0.

5.Downgrade the extension by one version and confirm the problem no longer occurs.

What is the expected behavior?

Codex should work on Rocky Linux 8.10 without failing on bwrap: Unknown option --argv0.

It should either work with the available system bwrap, fall back to a compatible vendored bubblewrap, or provide a supported way to point Codex to a newer bwrap.

Additional information

On this system, /usr/bin/bwrap --version is bubblewrap 0.4.0 and /usr/local/bin/bwrap --version is bubblewrap 0.9.0.

I installed 0.9.0 separately under /usr/local/bin because Rocky Linux 8 only provides 0.4.0, but the bundled VS Code Codex still fails.

Restarting VS Code Server did not help. Reordering PATH did not help. Setting BWRAP=/usr/local/bin/bwrap did not help. Setting BUBBLEWRAP=/usr/local/bin/bwrap did not help.

The extension log shows: [CodexMcpConnection] cli: message="codex_core::tools::router: error={\"output\":\"bwrap: Unknown option --argv0\\n\",\"metadata\":{\"exit_code\":1,\"duration_seconds\":0.0}}".

From local investigation, this looks like a regression in the newer bundled Codex / Linux sandbox behavior, because the previous extension version does not have this problem.