bwrap namespace error when using apply_patch

Resolved 💬 4 comments Opened Mar 23, 2026 by Sur3 Closed Apr 10, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What version of the Codex App are you using (From “About Codex” dialog)?

0.116.0

What subscription do you have?

plus

What platform is your computer?

linux

What issue are you seeing?

Since my last update of codex I get the error:
bwrap: No permissions to creating new namespace, likely because the kernel does not allow non-privileged user namespaces. On e.g. debian this can be enabled with 'sysctl kernel.unprivileged_userns_clone=1'.
making apply_patch non-working. codex therefore falls back to using perl for file edits.
apply_patch was working fine before the update though, so I think this is a codex bug.

What steps can reproduce the bug?

Trigger a workflow with apply_patch.

View original on GitHub ↗

4 Comments

github-actions[bot] contributor · 5 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #15057
  • #15434
  • #15496
  • #14919

Powered by Codex Action

Sur3 · 5 months ago

Yeah may actually be a duplicate of #14919.

Sur3 · 5 months ago

I closed this as duplicate of #14919 but it seems that issue was fixed but mine still resides, so I'm reopening this issue.

viyatb-oai contributor · 4 months ago

@pmchem can you install bubblewrap through apt? It should install an Apparmor policy that gives it privileges to create unprivileged namespaces.