openai / openai/codex

Node.js uv_os_get_passwd returned ENOMEM when running commands inside Codex on Windows

Open
#42,753 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug CLI sandbox tool-calls windows-os
Dominant language
Rust
Stars
125k
Forks
19.4k
PR merge metrics
PR metrics pending

Description

What version of Codex CLI is running?

codex-cli 0.153.0

What subscription do you have?

Team

Which model were you using?

gpt-5.6-luna

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What terminal emulator and version are you using (if applicable)?

No response

Codex doctor report
{
  "schemaVersion": 1,
  "generatedAt": "1788525441s since unix epoch",
  "overallStatus": "warning",
  "codexVersion": "0.153.0",
  "checks": {
    "app_server.status": {
      "id": "app_server.status",
      "category": "app-server",
      "status": "ok",
      "summary": "background server is not running",
      "details": {
        "control socket": "C:\\Users\\icaro\\.codex\\app-server-control\\app-server-control.sock",
        "daemon state dir": "C:\\Users\\icaro\\.codex\\app-server-daemon",
        "mode": "ephemeral",
        "pid file": "C:\\Users\\icaro\\.codex\\app-server-daemon\\app-server.pid (missing)",
        "settings": "C:\\Users\\icaro\\.codex\\app-server-daemon\\settings.json (missing)",
        "status": "not running",
        "update-loop pid file": "C:\\Users\\icaro\\.codex\\app-server-daemon\\app-server-updater.pid (missing)"
      },
      "remediation": null,
      "durationMs": 0
    },
    "auth.credentials": {
      "id": "auth.credentials",
      "category": "auth",
      "status": "ok",
      "summary": "auth is configured",
      "details": {
        "auth file": "C:\\Users\\icaro\\.codex\\auth.json",
        "auth storage mode": "File",
        "stored API key": "false",
        "stored ChatGPT tokens": "true",
        "stored agent identity": "false",
        "stored auth mode": "chatgpt"
      },
      "remediation": null,
      "durationMs": 0
    },
    "config.load": {
      "id": "config.load",
      "category": "config",
      "status": "ok",
      "summary": "config loaded",
      "details": {
        "CODEX_HOME": "C:\\Users\\icaro\\.codex",
        "config.toml": "C:\\Users\\icaro\\.codex\\config.toml",
        "config.toml parse": "ok",
        "cwd": "C:\\Users\\icaro",
        "enabled feature flags": "<redacted>",
        "feature flag overrides": "none",
        "feature flags enabled": "48",
        "log dir": "C:\\Users\\icaro\\.codex\\log",
        "mcp servers": "0",
        "model": "gpt-5.6-luna",
        "model provider": "openai",
        "sqlite home": "C:\\Users\\icaro\\.codex"
      },
      "remediation": null,
      "durationMs": 0
    },
    "git.environment": {
      "id": "git.environment",
      "category": "git",
      "status": "ok",
      "summary": "git version 2.55.0.windows.3",
      "details": {
        "PATH git #1": "C:\\Program Files\\Git\\cmd\\git.exe",
        "PATH git entries": "1",
        "git build options": "git version 2.55.0.windows.3; cpu: x86_64; built from commit: 52ca1113d651127f89477a8763f86ab20f645e1d; sizeof-long: 4; sizeof-size_t: 8; shell-path: D:/git-sdk-64/usr/bin/sh; rust: disabled; feature: fsmonitor--daemon; gettext: enabled; libcurl: 8.21.0; OpenSSL: OpenSSL 3.5.7 9 Jun 2026; zlib: 1.3.2; SHA-1: SHA1_DC; SHA-256: SHA256_BLK; default-ref-format: files; default-hash: sha1",
        "git exec path": "C:/Program Files/Git/mingw64/libexec/git-core",
        "git version": "git version 2.55.0.windows.3",
        "repo detected": "false",
        "selected git": "C:\\Program Files\\Git\\cmd\\git.exe"
      },
      "remediation": null,
      "durationMs": 667
    },
    "git.worktree.dev_drive": {
      "id": "git.worktree.dev_drive",
      "category": "git",
      "status": "ok",
      "summary": "no Git worktree is active",
      "details": {},
      "remediation": null,
      "durationMs": 0
    },
    "installation": {
      "id": "installation",
      "category": "install",
      "status": "ok",
      "summary": "installation looks consistent",
      "details": {
        "PATH codex #1": "C:\\Users\\icaro\\AppData\\Local\\pnpm\\bin\\codex",
        "PATH codex #2": "C:\\Users\\icaro\\AppData\\Local\\pnpm\\bin\\codex.CMD",
        "PATH codex entries": "2",
        "current executable": "C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\bin\\codex.exe",
        "install context": "pnpm (package C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc, bin C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\bin, resources C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\codex-resources, path C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\codex-path)",
        "managed by Vite+": "false",
        "managed by bun": "false",
        "managed by npm": "false",
        "managed by pnpm": "true",
        "managed package root": "C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0\\691f6a24eb603f2c1c0ad0f00184c7be480826727dff1840440c07eeb39e904a\\node_modules\\@openai\\codex"
      },
      "remediation": null,
      "durationMs": 82
    },
    "mcp.config": {
      "id": "mcp.config",
      "category": "mcp",
      "status": "ok",
      "summary": "no MCP servers configured",
      "details": {},
      "remediation": null,
      "durationMs": 0
    },
    "network.env": {
      "id": "network.env",
      "category": "network",
      "status": "ok",
      "summary": "network-related environment looks readable",
      "details": {
        "managed proxy": "not configured",
        "proxy env vars": "none",
        "respect system proxy": "disabled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "network.provider_reachability": {
      "id": "network.provider_reachability",
      "category": "reachability",
      "status": "ok",
      "summary": "active provider endpoints are reachable over HTTP",
      "details": {
        "ChatGPT inference URL": "https://chatgpt.com/backend-api/<redacted> reachable (HTTP 405)",
        "reachability mode": "ChatGPT auth"
      },
      "remediation": null,
      "durationMs": 273
    },
    "network.websocket_reachability": {
      "id": "network.websocket_reachability",
      "category": "websocket",
      "status": "ok",
      "summary": "Responses WebSocket handshake succeeded",
      "details": {
        "DNS": "2 IPv4, 2 IPv6, first IPv6",
        "auth mode": "chatgpt",
        "connect timeout": "15000 ms",
        "endpoint": "wss://chatgpt.com/backend-api/<redacted>",
        "handshake result": "HTTP 101 Switching Protocols",
        "model provider": "openai",
        "provider name": "OpenAI",
        "proxy env vars": "none",
        "reasoning header": "false",
        "server model present": "false",
        "supports websockets": "true",
        "wire API": "responses"
      },
      "remediation": null,
      "durationMs": 1312
    },
    "runtime.provenance": {
      "id": "runtime.provenance",
      "category": "runtime",
      "status": "ok",
      "summary": "running pnpm on windows-x86_64",
      "details": {
        "commit": "unknown",
        "current executable": "C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\bin\\codex.exe",
        "install method": "pnpm (package C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc, bin C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\bin, resources C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\codex-resources, path C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\codex-path)",
        "platform": "windows-x86_64",
        "version": "0.153.0"
      },
      "remediation": null,
      "durationMs": 0
    },
    "runtime.search": {
      "id": "runtime.search",
      "category": "search",
      "status": "ok",
      "summary": "search is OK (bundled)",
      "details": {
        "search command": "C:\\Users\\icaro\\AppData\\Local\\pnpm\\store\\v11\\links\\@openai\\codex\\0.153.0-win32-x64\\46531ceb7c072d9b576ebdc4117e711aab9a5fcdeade2ea16d5690fcea92d44e\\node_modules\\@openai\\codex\\vendor\\x86_64-pc-windows-msvc\\codex-path\\rg.exe",
        "search command readiness": "file exists",
        "search provider": "bundled"
      },
      "remediation": null,
      "durationMs": 0
    },
    "sandbox.helpers": {
      "id": "sandbox.helpers",
      "category": "sandbox",
      "status": "ok",
      "summary": "sandbox configuration is readable",
      "details": {
        "approval policy": "OnRequest",
        "codex-linux-sandbox helper": "none",
        "denied-read restrictions": "false",
        "execve wrapper helper": "none",
        "filesystem sandbox": "restricted",
        "network sandbox": "restricted",
        "sandbox backend": "elevated",
        "sandbox provisioning": "complete"
      },
      "remediation": null,
      "durationMs": 4
    },
    "security.endpoint": {
      "id": "security.endpoint",
      "category": "security",
      "status": "warning",
      "summary": "endpoint protection detected; Codex exclusions are unverified",
      "details": {
        "Codex exclusions": "not verified",
        "endpoint products": "Microsoft Defender",
        "exclusion targets": "signed Codex app; codex.exe; codex-windows-sandbox-setup.exe; codex-command-runner.exe; codex-code-mode-host.exe"
      },
      "issues": [
        {
          "severity": "warning",
          "cause": "Microsoft Defender can interfere with Codex. Verify Codex exclusions.",
          "measured": "not verified",
          "expected": "Codex application and helper exclusions",
          "remedy": "Microsoft Defender: Add a certificate or executable-path exclusion for Codex and its helpers. If Attack Surface Reduction blocks Codex, add a rule exclusion. If Controlled Folder Access blocks Codex, allow the app.",
          "fields": [
            "Codex exclusions"
          ]
        }
      ],
      "remediation": "ask your security administrator to verify Codex exclusions and required helper allowances",
      "durationMs": 33
    },
    "state.paths": {
      "id": "state.paths",
      "category": "state",
      "status": "ok",
      "summary": "state paths and databases are inspectable",
      "details": {
        "CODEX_HOME": "C:\\Users\\icaro\\.codex (dir)",
        "active rollout files": "33 files, 59397260 total bytes, 1799916 average bytes",
        "archived rollout files": "0 files, 0 total bytes, 0 average bytes",
        "goals DB": "C:\\Users\\icaro\\.codex\\goals_1.sqlite (file)",
        "goals DB integrity": "ok",
        "log DB": "C:\\Users\\icaro\\.codex\\logs_2.sqlite (file)",
        "log DB integrity": "ok",
        "log dir": "C:\\Users\\icaro\\.codex\\log (missing)",
        "memories DB": "C:\\Users\\icaro\\.codex\\memories_1.sqlite (file)",
        "memories DB integrity": "ok",
        "queue DB": "C:\\Users\\icaro\\.codex\\queue_1.sqlite (file)",
        "queue DB integrity": "ok",
        "sqlite home": "C:\\Users\\icaro\\.codex (dir)",
        "state DB": "C:\\Users\\icaro\\.codex\\state_5.sqlite (file)",
        "state DB integrity": "ok",
        "thread history DB": "C:\\Users\\icaro\\.codex\\thread_history_1.sqlite (file)",
        "thread history DB integrity": "ok"
      },
      "remediation": null,
      "durationMs": 659
    },
    "state.rollout_db_parity": {
      "id": "state.rollout_db_parity",
      "category": "threads",
      "status": "ok",
      "summary": "rollout files and state DB thread inventory agree",
      "details": {
        "default model provider": "openai",
        "rollout DB active files": "33",
        "rollout DB active rows": "33",
        "rollout DB archive mismatches": "0",
        "rollout DB archived files": "0",
        "rollout DB archived rows": "0",
        "rollout DB duplicate DB paths": "0",
        "rollout DB duplicate rollout thread ids": "0",
        "rollout DB malformed file names": "0",
        "rollout DB missing active rows": "0",
        "rollout DB missing archived rows": "0",
        "rollout DB model providers": "openai=33",
        "rollout DB rows": "33",
        "rollout DB scan cap reached": "false",
        "rollout DB scan errors": "0",
        "rollout DB sources": "vscode=18, subagent:thread_spawn=9, cli=6",
        "rollout DB stale rows": "0"
      },
      "remediation": null,
      "durationMs": 507
    },
    "system.disk": {
      "id": "system.disk",
      "category": "disk",
      "status": "ok",
      "summary": "sufficient free disk space (108.6 GiB)",
      "details": {
        "CODEX_HOME available": "108.6 GiB",
        "failure threshold": "1.0 GiB",
        "warning threshold": "5.0 GiB",
        "worktree available": "108.6 GiB"
      },
      "remediation": null,
      "durationMs": 0
    },
    "system.environment": {
      "id": "system.environment",
      "category": "system",
      "status": "ok",
      "summary": "OS language pt-BR",
      "details": {
        "EDITOR": "not set",
        "VISUAL": "not set",
        "os": "Windows 10.0.26200 (Windows 11 CoreSingleLanguage) [64-bit]",
        "os language": "pt-BR",
        "os type": "Windows",
        "os version": "10.0.26200"
      },
      "remediation": null,
      "durationMs": 0
    },
    "terminal.env": {
      "id": "terminal.env",
      "category": "terminal",
      "status": "ok",
      "summary": "terminal metadata was detected",
      "details": {
        "WT_SESSION": "present",
        "color output": "enabled",
        "console input code page": "65001",
        "console output code page": "65001",
        "stderr console mode": "0x00000007 (VT processing: true)",
        "stderr is terminal": "true",
        "stdin is terminal": "true",
        "stdout console mode": "0x00000007 (VT processing: true)",
        "stdout is terminal": "true",
        "terminal": "Windows Terminal",
        "terminal size": "115x29"
      },
      "remediation": null,
      "durationMs": 0
    },
    "terminal.title": {
      "id": "terminal.title",
      "category": "title",
      "status": "ok",
      "summary": "terminal title default",
      "details": {
        "terminal title activity": "true",
        "terminal title items": "activity, project-name",
        "terminal title project source": "cwd",
        "terminal title project value": "icaro",
        "terminal title source": "default"
      },
      "remediation": null,
      "durationMs": 0
    },
    "updates.status": {
      "id": "updates.status",
      "category": "updates",
      "status": "ok",
      "summary": "update configuration is locally consistent",
      "details": {
        "cached latest version": "0.153.2",
        "check for update on startup": "true",
        "last checked at": "2026-09-04T12:15:48.097850300Z",
        "latest version": "0.153.2",
        "latest version status": "newer version is available",
        "update action": "pnpm add -g @openai/codex",
        "version cache": "C:\\Users\\icaro\\.codex\\version.json"
      },
      "remediation": null,
      "durationMs": 984
    }
  }
}
What issue are you seeing?

Node.js uv_os_get_passwd returned ENOMEM when running commands inside Codex on Windows

Description

The Codex CLI is unable to run Node.js-based commands such as:

pnpm run test

The command fails with:

SystemError [ERR_SYSTEM_ERROR]: A system error occurred:
uv_os_get_passwd returned ENOMEM (not enough memory)

The error appears to be misleading because there is sufficient memory available on the system. The issue only occurs when Node.js commands are executed through Codex.

Environment

  • OS: Windows
  • Node.js: v24.13.0
  • Node installed through NVM for Windows
  • Package manager: pnpm
  • Codex CLI

Important observations

The same Node.js installation works correctly when executed from a normal PowerShell session.

Outside Codex:

node -e "console.log(require('os').userInfo())"

successfully returns the current user's information.

Inside Codex, the following command works correctly:

node -e "console.log(require('os').homedir())"

and returns the expected user home directory.

However:

node -e "console.log(require('os').userInfo())"

consistently fails with:

uv_os_get_passwd returned ENOMEM (not enough memory)

Additional context

The issue does not appear to be related to actual system memory exhaustion because:

  • There is sufficient memory available.
  • The same Node.js installation works correctly outside Codex.
  • os.homedir() works inside Codex.
  • os.userInfo() works outside Codex but fails inside Codex.

This suggests the issue may be related to the Codex execution/sandbox environment on Windows, specifically its interaction with Node.js/libuv and the uv_os_get_passwd() implementation.

Request

Please investigate why uv_os_get_passwd() returns ENOMEM when Node.js is executed through the Codex environment on Windows, while the same Node.js installation works correctly outside Codex.

What steps can reproduce the bug?

Steps to reproduce

Inside Codex, run:

node -e "console.log(require('os').userInfo())"

The command fails with:

SystemError [ERR_SYSTEM_ERROR]: A system error occurred:
uv_os_get_passwd returned ENOMEM (not enough memory)

As a consequence, Node.js-based commands such as:

pnpm run test

also fail.

What is the expected behavior?

Node.js commands should execute normally inside Codex, including:

node -e "console.log(require('os').userInfo())"
pnpm run test

uv_os_get_passwd() should not return ENOMEM when the system has sufficient available memory.

Additional information

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the failure when running commands inside Codex CLI on Windows, using the reported codex-cli 0.153.0 environment and the uv_os_get_passwd ENOMEM message. Trace the command-execution path to determine where the Windows error originates; done means commands run successfully without this error.

Written by the indexing model from the issue text.

Assessment

Tech stack
node.js, rust
Domain
cli, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.