codex-cli in docker: bwrap: No permissions to create a new namespace

What version of Codex CLI is running?

codex-cli 0.117.0

What subscription do you have?

basic

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.6.87.2-microsoft-standard-WSL2 x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

Windows Terminal

What issue are you seeing?

Hi,
I am using codex-cli in docker. After upgrading codex from 0.114.0 to 0.117.0, I found that the warnning: bwrap: No permissions to create a new namespace, likely because the kernel does not allow non-privileged user namespaces. On e.g. debian this can be enabled with 'sysctl kernel.unprivileged_userns_clone=1'.

I found a related discussion here:

• https://github.com/containers/bubblewrap/issues/505#issuecomment-2010346455

What’s the best way to handle this and improve the experience when running in Docker?

What steps can reproduce the bug?

run cli in docker

What is the expected behavior?

_No response_

Additional information

_No response_