Skip to content

ci: pin the Codex review job to ubuntu-24.04 - #228

Merged
foadshafighi merged 1 commit into
mainfrom
ci/codex-review-ubuntu-24.04
Nov 10, 2026
Merged

foadshafighi merged 1 commit into
mainfrom
ci/codex-review-ubuntu-24.04

Conversation

@foadshafighi

Copy link
Copy Markdown
Collaborator

Summary

The Codex Code Review check fails on every pull request before Codex starts (seen on #226 and #227):

Error: Could not restrict access to /run/dbus/system_bus_socket.
    at restrictRootServiceSocket (.../openai/codex-action/.../dist/main.js:25697:13)

The job runs on ubuntu-latest, which now resolves to the ubuntu-26.04 image (run 42826956843: Ubuntu 26.04.1, image version 20261101.186.1). codex-action's drop-sudo step fails on that image; this is upstream issue openai/codex-action#188, with a fix proposed in openai/codex-action#191 and not yet released. Other projects affected by it pin the job to ubuntu-24.04.

Change

  • .github/workflows/codex-review.yml: runs-on: ubuntu-24.04 for the Codex job, with a comment naming the upstream issue and when to return to ubuntu-latest.

Verification

The workflow triggers on pull_request, so this PR's own Codex Code Review run uses the pinned runner and shows whether the fix works.

ubuntu-latest now resolves to the ubuntu-26.04 image for this job, and
codex-action's drop-sudo step fails there with "Could not restrict
access to /run/dbus/system_bus_socket", so Codex never starts and the
check fails on every pull request. This is upstream issue
openai/codex-action#188 (fix proposed in #191). Pin the job to
ubuntu-24.04 until a codex-action release ships the fix.
@github-actions

Copy link
Copy Markdown

Codex Automated Code Review

Code Review Summary

PR: Pins the Codex review job to Ubuntu 24.04 to avoid the documented drop-sudo failure on Ubuntu 26.04.

P0 - Critical Issues (Must Fix)

None found

P1 - High Priority Issues (Should Fix)

None found

P2 - Medium Priority Issues (Consider Fixing)

None found

P3 - Low Priority Issues (Optional)

None found

Positive Observations

  • The runner change is narrowly scoped and preserves existing workflow permissions and safeguards.
  • Comments explain the workaround, reference upstream issues, and identify when to remove the pin.

Reviewed the complete diff and surrounding workflow. GitHub-hosted execution was not available locally.


Automated review by OpenAI Codex

@greptile-apps

greptile-apps Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

RetriggerView in GreptileConfidence Score: 5/5

[Low impact] The PR appears safe to merge.

Summary

Pins the Codex review job to ubuntu-24.04 to avoid the reported drop-sudo failure.

  • The Codex review job now runs on Ubuntu 24.04.

Reviews (1) · Last reviewed commit: "ci: pin the Codex review job to ubuntu-2..." · Reviewed by Greptile

@foadshafighi
foadshafighi merged commit 192addb into main Nov 10, 2026
10 checks passed
@foadshafighi
foadshafighi deleted the ci/codex-review-ubuntu-24.04 branch November 10, 2026 20:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant