Allow GPU access inside sandbox

[enolan]

What feature would you like to see?

Currently the sandbox breaks access to nvidia gpus on Linux:

enolan@chonk ~> nvidia-smi
Wed Sep  3 23:07:27 2025       
+-----------------------------------------------------------------------------------------+
| NVIDIA-SMI 570.153.02             Driver Version: 570.153.02     CUDA Version: 12.8     |
|-----------------------------------------+------------------------+----------------------+
[snip]
enolan@chonk ~> ~/.npm-global/bin/codex debug landlock nvidia-smi
Failed to initialize NVML: Unknown Error

There should be a way to allow Codex to use GPUs without completely disabling the sandbox. I want it to be able to run tests for my ML projects. Or it should be allowed by default maybe. But that's a lot of attack surface.

Are you interested in implementing this feature?

No

Additional information

No response

[L1aoXingyu]

met the same issue

[davidstap]

I'm also interested in this.

[nallana]

+1

[L1aoXingyu]

i found when i pass --dangerously-bypass-approvals-and-sandbox, it can use GPU in docker.

[ShangAlex]

+1

[annawoodard]

same issue for me but --dangerously-bypass-approvals-and-sandbox (thanks @L1aoXingyu) works on campus HPC cluster

[Hemistone]

+1

[devjj]

+1

[CedricHwong]

@L1aoXingyu Thanks！

[Jadiker]

Similar issue on Windows and WSL using the VSCode extension. I'm not a security expert so it's not clear to me why it can't access GPU resources without being in "full access" mode. I still want to limit its access to files on my computer, as I have sensitive data, but I want it to be able to autonomously run ML experiments using my local GPU.

(One especially confusing aspect is the fact that in non-full-access mode, it can successfully run nvidia-smi and see that the GPU device exists, but torch.cuda.is_available() == False.)

[glennmatlin]

i found when i pass --dangerously-bypass-approvals-and-sandbox, it can use GPU in docker.

Dangerous bypass should not be required for GPU access -- ideally a flag should be used when calling just like how websearch has one.

[haimat]

I hit the same issue and agree - it should be possible to allow GPU access while still restrict other access.

[HenryQUQ]

Totally agree. Should have a command maybe called "enable_GPUs"

[Infinity12306]

really need this feature!!!!