spacedriveapp / spacedriveapp/spacebot
bwrap: Creating new namespace failed: Operation not permitted - Shell commands fail in Docker container
Nobody has claimed this yet.
- Dominant language
- Rust
- Stars
- 2.4k
- Forks
- 367
- PR merge metrics
- No merged PRs in 30d
Description
Sandbox blocks all shell command execution in containerized environments.
Steps to reproduce:
Run spacebot v0.3.3 inside a Docker container
Attempt to execute any shell command via worker (e.g., gh --version)
Error occurs
Expected behavior: Shell commands should execute normally, or system should gracefully fall back to unsandboxed execution with a warning.
Actual behavior:
bwrap: Creating new namespace failed: Operation not permitted
Environment:
spacebot v0.3.3
Docker container (Linux)
Sandbox mode: enabled
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the failure with spacebot v0.3.3 in a Linux Docker container, with sandbox mode enabled, and run a worker shell command such as gh --version. Trace the sandboxed command path that invokes bwrap; done means commands work in the container or fail over to unsandboxed execution with a warning.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, rust
- Domain
- infrastructure, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100