nsjail --skip_setsid -R / -R /home -B $HOME/.codex -B $(pwd) --cwd $(pwd) --disable_clone_newnet -- $(which codex)