Allow isolated writable mount of /tmp in sandbox
Resolved 💬 3 comments Opened Apr 13, 2026 by akihikodaki Closed May 16, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor)
responded on this thread — see the highlighted reply below.
What variant of Codex are you using?
IDE Extension
What feature would you like to see?
I'd like an option to isolated writable mount of /tmp in sandbox, for example sandbox_workspace_write.isolate_slash_tmp.
Additional information
My use case is GNU Make's POSIX jobserver on Linux: https://www.gnu.org/software/make/manual/html_node/POSIX-Jobserver.html
It creates /tmp/GMfifo<PID>, but since bubblewrap creates a PID namespace, the PID can collide and break the jobserver, requiring a fallback to the pipe jobserver and breaks parallel builds for some Make users.
3 Comments
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
#16910 requests a different feature so this issue is not a duplicate, though its reporter suggests the feature described in this issue may help implementing it.
This feature hasn't received enough upvotes, so closing.