codex - 💡(How to fix) Fix Allow per-session sandbox override for local VM and benchmark [2 comments, 2 participants]

TL;DR

Allowing an explicit per-session sandbox override in Codex may resolve the issue with blocked host-side operations during I/O benchmarking with QEMU/KVM.

Guidance

• Investigate the current sandbox configuration in Codex to understand the specific restrictions causing the issue.
• Consider the security implications of allowing a per-session sandbox override and weigh the benefits against potential risks.
• If an override is feasible, design an opt-in mechanism with clear visibility to ensure users understand the implications of bypassing sandbox restrictions.
• Explore alternative solutions, such as integrating QEMU/KVM support directly into Codex or using a separate environment for benchmarking, as a temporary workaround.

Notes

The requested improvement requires careful consideration of security trade-offs and potential implementation complexities.

Recommendation

Apply a workaround, such as using a separate environment for benchmarking, until a more integrated solution can be developed, to minimize the impact on systems and performance work.