Give Codex some bubblewrap

This commit is contained in:
2026-05-03 02:56:55 -05:00
parent 84a437c399
commit 64acb884a9
+5 -2
View File
@@ -8,14 +8,17 @@
(pkgs.stdenvNoCC.mkDerivation { (pkgs.stdenvNoCC.mkDerivation {
name = "codex"; name = "codex";
version = "0.128.0"; version = "0.128.0";
nativeBuildInputs = [ pkgs.makeWrapper ];
src = pkgs.fetchurl { src = pkgs.fetchurl {
url = "https://github.com/openai/codex/releases/download/rust-v0.128.0/codex-x86_64-unknown-linux-musl.tar.gz"; url = "https://github.com/openai/codex/releases/download/rust-v0.128.0/codex-x86_64-unknown-linux-musl.tar.gz";
hash = "sha256-iGuF5hGMC0MjRDfKAH++kjYRpTsQPQDg0650rvsg4jo="; hash = "sha256-iGuF5hGMC0MjRDfKAH++kjYRpTsQPQDg0650rvsg4jo=";
}; };
sourceRoot = "."; sourceRoot = ".";
installPhase = '' installPhase = ''
mkdir -p $out/bin mkdir -p $out/bin $out/libexec
install -m755 codex-x86_64-unknown-linux-musl $out/bin/codex install -m755 codex-x86_64-unknown-linux-musl $out/libexec/codex
makeWrapper $out/libexec/codex $out/bin/codex \
--prefix PATH : ${lib.makeBinPath [ pkgs.bubblewrap ]}
''; '';
}) })
]; ];