codex-cli 0.128.0 Linux sandbox fails with bubblewrap 0.4.0: bwrap: Unknown option --perms

What version of Codex CLI is running?

codex-cli 0.128.0 when the issue occurs.

I have currently downgraded to codex-cli 0.125.0 on the same machine as a workaround, and sandboxed commands work again.

What platform is your computer?

Ubuntu 20.04.6 LTS (focal)

bubblewrap version

bubblewrap 0.4.0

What issue are you seeing?

After upgrading Codex CLI from 0.125.0 to 0.128.0, sandboxed commands fail before the requested command starts.

The stderr is:

bwrap: Unknown option --perms

Downgrading back to codex-cli 0.125.0 makes sandboxed commands work again on the same machine.

Expected behavior

Codex should either:

• remain compatible with bubblewrap 0.4.0, or
• detect the unsupported bwrap version and show a clear preflight error with the minimum required version.

Actual behavior

Normal sandboxed commands fail during sandbox startup with:

bwrap: Unknown option --perms

Additional context

bubblewrap 0.5.0 introduced --perms, while Ubuntu 20.04 currently provides bubblewrap 0.4.0 as the latest distro package.

Codex 0.128.0 release notes mention expanded permission profiles / sandbox changes, but do not appear to document a minimum bubblewrap version requirement or this compatibility break.