Hey Billy, thanks for coming back with an update from your side.
Honestly, there’s no update on the fix yet. The ticket is still in the tracker, but I can’t share a specific ETA. I don’t want to promise a timeline I don’t have.
The fact that you’re switching to --no-sandbox or Codex is a real signal of impact, and I called that out to the engineers separately.
For now, the options are still the same:
- A
strace -f -o /dev/nullwrapper. It works, but it’s a hack. - An AppArmor profile with
userns,from the cluster admins. Template is in post #10 AppArmor cursor-sandbox profile incomplete on Linux — sandbox does not work correctly (missing network, signal, userns) - #10 by gcespedes. If you can convince them, this is the cleanest path since it keeps confinement. --no-sandbox, as you noted, isn’t a good long-term option.
As soon as a profile with userns, uncommented ships, or we get movement on the timeline, I’ll reply in the thread.