Copilot CLI's Linux sandbox now hard-depends on slirp4netns, nsenter and the iptables family
GitHub·medium signal
The 1.0.83 notes say Linux sandboxing needs slirp4netns, nsenter, iptables, ip6tables, iptables-restore and ip6tables-restore on PATH, and that proxy mode additionally requires util-linux 2.35+ and /dev/net/tun access. Sandboxed commands fail to launch outright if these are missing, which will bite slim CI images and distroless containers first. Install them before upgrading rather than debugging a launch failure inside a pipeline.