From beaf98fba48521d20a4949ae9e3f3895cf8a0a87 Mon Sep 17 00:00:00 2001
From: viyatb-oai <viyatb@openai.com>
Date: Mon, 16 Mar 2026 22:55:49 -0700
Subject: [PATCH] fix: link Linux bubblewrap workaround context

---
 action.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 8d89c88..ab4edf2 100644
--- a/action.yml
+++ b/action.yml
@@ -268,7 +268,8 @@ runs:
         # Bubblewrap needs unprivileged user namespaces on GitHub-hosted Linux
         # runners. This step runs before drop-sudo, then becomes a no-op on
         # later codex-action invocations in the same job because the sysctls
-        # already have the desired values.
+        # already have the desired values. See issue #75 for the failure mode
+        # this is working around on newer Ubuntu images.
         current_userns="$(sysctl -n kernel.unprivileged_userns_clone 2>/dev/null || true)"
         if [ -n "$current_userns" ] && [ "$current_userns" != "1" ]; then
           echo "Enabling kernel.unprivileged_userns_clone for bubblewrap."