viyatb-oai 779e9114ae Reap orphaned processes in Linux sandboxes (#38396) ...

## Why

Sandboxed descendants can outlive their immediate parent and must be collected by
PID 1 in the Bubblewrap namespace.

## What changed

- Launch `codex-linux-sandbox` with Bubblewrap's `--as-pid-1` option, and fall
  back to the bundled Bubblewrap when the system version does not support it.
- Run the sandboxed command as a child, forward signals to it, reap other exited
  descendants, and preserve the command's exit status.
- Verify proxy bridge parent identity when arming its parent-death signal.

## Testing

Added Linux sandbox coverage for the filtered namespace reaper, orphan
collection, and fallback from an incompatible system Bubblewrap.

GitOrigin-RevId: 379f08d6c2732ea0a4caeb61f93ae302e16d2458

2026-08-13 15:45:51 +00:00

..

common

Add executor-local config reads to the exec server (#37408)

2026-08-07 08:32:30 +00:00

file_system

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

relay

Test exec-server compatibility across Codex versions (#35990)

2026-07-29 16:30:23 +00:00

support

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

capability_discovery.rs

Respect filesystem permissions during capability discovery (#36124)

2026-07-30 10:01:06 +00:00

chatgpt_cloudflare_affinity.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

deferred_environment.rs

Consolidate deferred environment provisioning APIs (#37340)

2026-08-07 00:32:59 +00:00

environment_config.rs

Advertise environment config read support (#37654)

2026-08-09 03:05:10 +00:00

environment.rs

Route exec-server WebSockets through configured proxies (#35056)

2026-07-24 00:16:42 +00:00

exec_process.rs

Terminate Windows non-TTY processes on interrupt (#35655)

2026-07-27 18:37:11 +00:00

file_stream.rs

Support sandboxed file streaming in exec-server (#38356)

2026-08-13 11:11:26 +00:00

file_system_unix.rs

Reap orphaned processes in Linux sandboxes (#38396)

2026-08-13 15:45:51 +00:00

file_system_windows.rs

path-uri: clarify host-native path conversion (#29501)

2026-06-23 00:02:33 +00:00

health.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_client.rs

Stabilize exec-server byte-budget tests (#38362)

2026-08-13 12:00:19 +00:00

http_request_logging.rs

Decouple exec-server HTTP from reqwest types (#35059)

2026-07-24 00:53:05 +00:00

http_request.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

initialize.rs

Add opt-in concurrent exec-server request dispatch (#36987)

2026-08-04 22:28:15 +00:00

process.rs

Collect plugin metrics from remote executors (#38283)

2026-08-13 00:39:04 +00:00

relay.rs

Test remote environments reported ready before selection (#37156)

2026-08-05 20:39:11 +00:00

selected_capability_roots.rs

Initialize execution environments with the final HTTP policy (#34995)

2026-07-23 19:24:41 +00:00

websocket.rs

[codex] Trace exec-server JSON-RPC requests (#27466)

2026-06-24 12:50:18 -07:00