codex-cli 0.118.0 - bubblewrap-suid on arch linux not working

What version of Codex CLI is running?

0.118.0

What subscription do you have?

plus

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.17.13-hardened1-3-hardened x86_64 unknown

What terminal emulator and version are you using (if applicable)?

_No response_

What issue are you seeing?

In 0.118.0, a new bug exists where Codex receives an error trying to edit files _"bwrap: No permissions to create a new namespace, likely because the kernel does not allow non-privileged user namespaces"_.

However, I use the bubblewrap-suid package (https://archlinux.org/packages/extra/x86_64/bubblewrap-suid/) instead of the bubblewrap package (https://archlinux.org/packages/extra/x86_64/bubblewrap/) because I have nonprivileged user namespaces disabled (sysctl kernel.unprivileged_userns_clone=0).

What steps can reproduce the bug?

1. Install bubblewrap-suid package (https://archlinux.org/packages/extra/x86_64/bubblewrap-suid/
2. codex -a untrusted -C $(pwd)
3. have codex try to edit a file

What is the expected behavior?

The expected behavior is that the bubblewrap sandbox works with nonprivileged usernamespaces disabled.

Additional information

Here is my config.toml.

approval_policy = "untrusted"
sandbox_mode = "workspace-write"
web_search = "disabled"
allow_login_shell = false
project_root_markers = []
model = "gpt-5.4"
model_reasoning_effort = "xhigh"
plan_mode_reasoning_effort = "xhigh"

[sandbox_workspace_write]
network_access = false
exclude_slash_tmp = true
exclude_tmpdir_env_var = true
writable_roots = ["<REDACTED_PROJECT_DIRS>"]

[history]
persistence = "none"

[shell_environment_policy]
inherit = "none"
include_only = ["PATH"]
ignore_default_excludes = false
experimental_use_profile = false

[otel]
metrics_exporter = "none"
trace_exporter = "none"
log_user_prompt = false

[analytics]
enabled = false

[feedback]
enabled = false

[notice.model_migrations]
"gpt-4.3-codex" = "gpt-5.4"