feat: ship bubblewrap in the base image for the Codex CLI sandbox

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+### Added
+
+- `bubblewrap` in the base image so the OpenAI Codex CLI uses the system
+  `bwrap` for its Linux sandbox instead of warning and falling back to its
+  bundled helper.
+
 ### Removed
 
 - Paseo assistant installation and Selection support.

Dockerfile

@@ -37,6 +37,9 @@ RUN printf 'path-include=/usr/share/doc/fzf/examples/key-bindings.bash\n' \
 	nano \
 	zstd \
 	zoxide \
+	# bubblewrap: OpenAI Codex CLI's Linux sandbox uses the first bwrap on PATH
+	# and warns at startup when only its bundled fallback helper is available.
+	bubblewrap \
 	toilet \
 	toilet-fonts \
 	libicu-dev \

README.md

@@ -218,6 +218,7 @@ What's included
 | Name | Language | Description |
 |------|----------|-------------|
 | [bat](https://github.com/sharkdp/bat) | Rust | Cat clone with syntax highlighting |
+| [bubblewrap](https://github.com/containers/bubblewrap) | C | Unprivileged sandboxing tool (`bwrap`), used by the Codex CLI sandbox |
 | [curl](https://github.com/curl/curl) | C | URL data transfer |
 | [delta](https://github.com/dandavison/delta) | Rust | Syntax-highlighting pager for git diffs |
 | [difftastic](https://github.com/Wilfred/difftastic) | Rust | Syntax-aware structural diff tool (`difft`) |

scripts/e2e-test.sh

@@ -72,7 +72,7 @@ suite_tools() {
 	# Candidate suite so publication cannot depend on the separate PR workflow.
 	local command_name
 	local -a core_commands=(
-		bat curl delta difft eza fd fzf gh glow gum jq just mise nano rg
+		bat bwrap curl delta difft eza fd fzf gh glow gum jq just mise nano rg
 		starship xh yq zoxide
 	)
 	for command_name in "${core_commands[@]}"; do