OpenAI Explains Why Codex Launched Linux-First — Windows Lacked Sandboxing Primitives

r/OpenAI·medium signal

An r/OpenAI post (169 upvotes, 67 comments) surfaces OpenAI's technical explanation for Codex's Linux-first launch: Windows lacked the sandboxing tools Linux already had (Bubblewrap/bwrap for filesystem, PID, and network namespace isolation). OpenAI shipped a Windows sandbox on May 13, using native Windows sandbox with lower-privilege users and firewall rules, plus a Bubblewrap fallback via WSL2. Previously, Windows users had to approve every command or use full-access mode.