github / github/copilot-cli

System requirement doc for different Platform of sandboxing feature

Open
#4,046 0 comments 1 reaction 0 assignees View on GitHub
area:permissions area:platform-linux area:platform-windows
Dominant language
Shell
Stars
11.2k
Forks
1.9k
Avg merge
14h 16m
Merged PRs (30d)
6

Description

### Describe the bug

Hi, team , we're trying to integration copilot sandboxing feature to IntelliJ copilot plugin. However, seems sandbox feature is not very stable, and we cannot make it work on some platforms.

On Windows:

From docs, it should work for version 26300.8553, however, one machine with this version works fine and other one show errors:
`Experimental_CreateProcessInSandbox returned E_NOTIMPL. The following velocity keys are not enabled: 61389575, 61155944.`

Two machine has the same version as below:
```
Edition Windows 11 Enterprise Insider Preview
Version 26H2
Installed on ‎2026/‎7/‎6
Evaluation expires on ‎2026/‎8/‎12 2:09
OS build 26300.8758
Experience Windows Feature Experience Pack 1000.26100.402.0
```

On Linux:

It always show command failed after enable sandbox, maybe there is a version requirement?

Image

Image

On Mac:
When a sandboxed command is launched on macOS Seatbelt with a process working directory that is not allowed by the sandbox policy, the child shell can print noisy getcwd warnings during startup.

The command itself may still succeed, especially when it uses an absolute path that is allowed by the policy. The issue is confusing stderr noise, not a command failure .

Image

I think this is related MXC and we already create an issue here: https://github.com/microsoft/mxc/issues/611

### Affected version

_No response_

### Steps to reproduce the behavior

_No response_

### Expected behavior

_No response_

### Additional context

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the reported Windows, Linux, and macOS sandbox behavior and the linked MXC issue #611. Document the platform requirements, version constraints, and known macOS warning behavior, with clear supported and unsupported cases for each platform.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
cli, documentation, operating-systems
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.