Skip to content

Fix issues related with sandbox repair in dev containers. - #327680

Merged
dileepyavan merged 7 commits into
release/1.131from
DileepY/devcontainers
Jul 27, 2026
Merged

Fix issues related with sandbox repair in dev containers.#327680
dileepyavan merged 7 commits into
release/1.131from
DileepY/devcontainers

Conversation

@dileepyavan

Copy link
Copy Markdown
Member

Summary

  • enable the terminal sandbox to run in supported containerized environments
  • improve bubblewrap host-restriction detection and return actionable guidance when sandbox creation is blocked
  • add and update sandbox helper, engine, and terminal tool tests

Testing

  • Added and updated automated tests covering container execution and host-restriction handling.

Fixes #316626

Copilot AI review requested due to automatic review settings July 27, 2026 18:37
@vs-code-engineering

Copy link
Copy Markdown
Contributor

📬 CODENOTIFY

The following users are being notified based on files changed in this PR:

@anthonykim1

Matched files:

  • src/vs/workbench/contrib/terminalContrib/chatAgentTools/browser/tools/runInTerminalTool.ts
  • src/vs/workbench/contrib/terminalContrib/chatAgentTools/test/browser/terminalSandboxService.test.ts
  • src/vs/workbench/contrib/terminalContrib/chatAgentTools/test/electron-browser/runInTerminalTool.test.ts

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Enables terminal sandboxing in containers while improving bubblewrap restriction handling and remediation.

Changes:

  • Detects AppArmor restrictions and enables nested sandbox compatibility.
  • Adds bubblewrap failure guidance and automated remediation.
  • Expands sandbox and terminal tool tests.
Show a summary per file
File Description
src/vs/platform/sandbox/common/sandboxHelperService.ts Adds AppArmor restriction status.
src/vs/platform/sandbox/common/terminalSandboxEngine.ts Enables weaker nested sandbox mode.
src/vs/platform/sandbox/node/sandboxHelper.ts Reads the AppArmor restriction flag.
src/vs/platform/sandbox/test/common/terminalSandboxEngine.test.ts Tests nested sandbox behavior.
src/vs/platform/sandbox/test/node/sandboxHelper.test.ts Tests AppArmor detection.
src/vs/workbench/contrib/terminalContrib/chatAgentTools/browser/tools/runInTerminalTool.ts Handles remediation and host restriction errors.
src/vs/workbench/contrib/terminalContrib/chatAgentTools/test/browser/terminalSandboxService.test.ts Updates prerequisite test data.
src/vs/workbench/contrib/terminalContrib/chatAgentTools/test/electron-browser/runInTerminalTool.test.ts Tests remediation and guidance flows.

Review details

  • Files reviewed: 8/8 changed files
  • Comments generated: 4
  • Review effort level: Medium

Comment thread src/vs/platform/sandbox/common/terminalSandboxEngine.ts
@dileepyavan
dileepyavan marked this pull request as draft July 27, 2026 18:43
@dileepyavan
dileepyavan marked this pull request as ready for review July 27, 2026 18:47
@dileepyavan
dileepyavan enabled auto-merge (squash) July 27, 2026 18:47
@dileepyavan dileepyavan changed the title Enable terminal sandboxing inside containers Fix issues related with sandbox repair in dev containers. Jul 27, 2026
dileepyavan and others added 2 commits July 27, 2026 14:29
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@dileepyavan
dileepyavan merged commit 2a210f1 into release/1.131 Jul 27, 2026
55 checks passed
@vs-code-engineering vs-code-engineering Bot added this to the 1.131.0 milestone Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants