Give Codex some bubblewrap

2026-05-03 02:56:55 -05:00
parent 84a437c399
commit 64acb884a9
1 changed files with 5 additions and 2 deletions
@@ -8,14 +8,17 @@
 		(pkgs.stdenvNoCC.mkDerivation {
 			name = "codex";
 			version = "0.128.0";
+			nativeBuildInputs = [ pkgs.makeWrapper ];
 			src = pkgs.fetchurl {
 				url = "https://github.com/openai/codex/releases/download/rust-v0.128.0/codex-x86_64-unknown-linux-musl.tar.gz";
 				hash = "sha256-iGuF5hGMC0MjRDfKAH++kjYRpTsQPQDg0650rvsg4jo=";
 			};
 			sourceRoot = ".";
 			installPhase = ''
-				mkdir -p $out/bin
-				install -m755 codex-x86_64-unknown-linux-musl $out/bin/codex
+				mkdir -p $out/bin $out/libexec
+				install -m755 codex-x86_64-unknown-linux-musl $out/libexec/codex
+				makeWrapper $out/libexec/codex $out/bin/codex \
+					--prefix PATH : ${lib.makeBinPath [ pkgs.bubblewrap ]}
 			'';
 		})
 	];