Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags #13576

Copilot · 2026-02-03T20:15:54Z

Original prompt

This section details on the original issue you should resolve

<issue_title>Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags</issue_title>
<issue_description>## Summary

Adopt the new --enable-chroot feature from AWF v0.13.1 to simplify the generated workflow commands by removing unnecessary --mount and --env flags.

Background

AWF v0.13.1 introduced --enable-chroot mode which provides transparent access to host binaries (Python, Node.js, Go, etc.) while maintaining network isolation. This eliminates the need for explicit volume mounts and environment variable passthrough since the chroot environment has direct access to the host filesystem.

Blocked By

Update AWF (gh-aw-firewall) to v0.13.1 #13376 (Update AWF to v0.13.1)

Changes Required

Add --enable-chroot flag to AWF invocations in the workflow generator

Remove unnecessary --mount flags that were previously needed to expose host binaries/paths

Remove unnecessary --env flags that were previously needed to pass environment variables (chroot inherits host environment)

Benefits

Simpler generated workflow commands

Reduced configuration complexity

Better compatibility with host tools and environments

Cleaner workflow YAML output

Documentation

Chroot mode docs: https://github.com/github/gh-aw-firewall/blob/main/docs/chroot-mode.md</issue_description>

Comments on the Issue (you are @copilot in this section)

Fixes Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags #13379

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Changeset

Type: patch
Description: Switch the firewall AWF wrapper to the v0.13.1+ --enable-chroot mode so agent runs inherit the host binaries and environment without manually mounting each tool.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Changeset

Type: patch
Description: Simplify AWF chroot PATH handling so AWF_HOST_PATH carries the toolchain and only Go's GOROOT is captured while tests ensure --env-all is passed to AWF to even receive the host vars.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

…lags - Add --enable-chroot flag to AWF invocations for transparent host access - Remove unnecessary --mount flags for host binaries (replaced by chroot mode) - Remove --env-all and mirrored environment variable flags (inherited by chroot) - Remove tool bins setup command (not needed with chroot mode) - Update tests to verify new chroot mode behavior - Recompile all workflow files with simplified AWF commands Co-authored-by: Mossaka <[email protected]>

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Copilot

Pull request overview

This pull request adopts AWF v0.13.1's new --enable-chroot feature to significantly simplify workflow commands by eliminating unnecessary mount and environment variable flags. The chroot mode provides transparent access to host binaries and environment while maintaining network isolation.

Changes:

Added --enable-chroot flag to AWF invocations, enabling transparent host filesystem access
Removed 17+ individual binary mounts (cat, curl, gh, jq, yq, etc.) and system directory mounts that are now unnecessary
Removed --env-all and individual --env flags since chroot inherits the host environment
Updated tests to verify chroot mode behavior instead of checking for individual mounts

Reviewed changes

Copilot reviewed 139 out of 139 changed files in this pull request and generated no comments.

File	Description
pkg/workflow/sandbox_mounts_test.go	Updated tests to verify `--enable-chroot` flag presence instead of checking for standard mounts
pkg/workflow/firewall_args_test.go	Updated tests to verify chroot mode and confirm individual binary mounts are no longer used
.github/workflows/*.lock.yml (100+ files)	All compiled workflow files updated with simplified AWF commands using `--enable-chroot` instead of explicit mount/env flags

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

github-actions · 2026-02-03T20:42:42Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-03T20:42:42Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-03T20:42:44Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-02-03T20:42:45Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-03T20:44:17Z

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

github-actions · 2026-02-03T20:46:50Z

AI generated by Smoke Codex

Mossaka · 2026-02-03T20:48:20Z

@copilot This PR only adds --enable-chroot to the Copilot engine (copilot_engine_execution.go), but the Claude and Codex engines still use the old verbose approach with --env-all and individual --mount flags.

Please also update:

pkg/workflow/claude_engine.go
pkg/workflow/codex_engine.go

to use --enable-chroot mode and remove the unnecessary mount/env flags for consistency across all engines.

Bumps gh-aw-firewall from v0.13.1 to v0.13.2 which includes the fix for --enable-chroot with preset agent images (PR #459). Co-Authored-By: Claude Opus 4.5 <[email protected]>

github-actions · 2026-02-04T01:21:06Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-04T01:21:08Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-04T01:24:20Z

Agent Container Tool Check ✅

All required development tools are available in the agent container:

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.12
java	✅	21.0.10
dotnet	✅	available

Result: 12/12 tools available ✅

Status: PASS - All required tools are accessible in the container environment.

AI generated by Agent Container Smoke Test

github-actions · 2026-02-04T01:24:40Z

Smoke Test Results

GitHub MCP: ✅
Safe Inputs GH CLI: ✅
Serena MCP: ✅
Playwright: ✅
File/Bash: ✅
Discussion: ✅
Build: ❌ (Go 1.24.12 < required 1.25.0)
Workflow Dispatch: ✅

Overall: ⚠️ PARTIAL PASS (8/9)

cc @Mossaka @Copilot

AI generated by Smoke Copilot

github-actions · 2026-02-04T01:24:53Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

AWF v0.13.4 fixes an issue where the Go version from actions/setup-go was not being found in chroot mode. The entrypoint now prepends $GOROOT/bin to PATH when AWF_GOROOT is provided, ensuring the correct Go version is used. This fixes the smoke-copilot test failure: "Build: ❌ (Go 1.24.12 < required 1.25.0)" Also updates the constants_test.go expectation from v0.13.1 to v0.13.4. Co-Authored-By: Claude Opus 4.5 <[email protected]>

github-actions · 2026-02-04T06:27:42Z

🔍 PR Triage Results

Category: feature | Risk: high | Priority: 75/100

Scores Breakdown

Impact: 45/50 - Major feature adopting AWF v0.13.1 chroot mode across all engines (Copilot, Claude, Codex); simplifies workflow generation by removing mount/env flags; 910 additions, 1379 deletions across 162 files; affects core engine execution; fixes issue Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags #13379; net code reduction indicates cleanup
Urgency: 18/30 - Created 10 hours ago; not draft (ready for review); 110 comments showing extensive engagement; 29 commits indicating iterative development; CI pending; assigned to Mossaka; blocks other work; architectural improvement
Quality: 12/20 - CI pending (mergeable_state: unknown); comprehensive PR description with full implementation checklist; very large changeset but well-documented; active discussion (110 comments); includes tests; fixes reported issue; changesets included

📋 Recommended Action: fast_track

This is a critical infrastructure improvement that adopts AWF chroot mode and simplifies the codebase significantly (net -469 lines). The PR has been actively developed with 29 commits and 110 comments, showing thorough iteration. Despite the large scope and pending CI, the architectural benefits and issue resolution (fixes #13379) warrant fast-track review. The work quality is high with comprehensive documentation and testing.

Triaged by PR Triage Agent on 2026-02-04T06:24:15Z

AI generated by PR Triage Agent

github-actions · 2026-02-04T06:42:04Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-02-04T06:42:05Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-04T06:42:06Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-04T06:42:10Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-04T06:44:51Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.12
java	⚠️	present (path issue in test)
dotnet	⚠️	present (path issue in test)

Result: 10/12 tools fully verified ✅ | 2 tools present but path issues in smoke test ⚠️

Note: Java and .NET are installed at /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.10-7/x64/bin/java and /usr/bin/dotnet but encountered bash tool interception during version check. Both are available in the container environment.

AI generated by Agent Container Smoke Test

github-actions · 2026-02-04T06:46:09Z

Smoke Test Results: ✅ PASS

PRs Tested:

Remove validation, use "latest" as default version for install script #13668: Add --skip-validation flag for install script
chore: improve orchestration and projects instructions #13666: chore: create new dependabot burner workflow

§21661433345

AI generated by Smoke Copilot

github-actions · 2026-02-04T06:46:25Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

Initial plan

755711d

Copilot AI assigned Copilot and Mossaka Feb 3, 2026

Copilot started work on behalf of Mossaka February 3, 2026 20:16 View session

Copilot AI changed the title ~~[WIP] Use AWF --enable-chroot mode and remove unnecessary flags~~ Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags Feb 3, 2026

Copilot AI requested a review from Mossaka February 3, 2026 20:34

Copilot finished work on behalf of Mossaka February 3, 2026 20:34

Mossaka marked this pull request as ready for review February 3, 2026 20:39

Mossaka requested review from Copilot and removed request for Copilot February 3, 2026 20:39

Copilot started reviewing on behalf of Mossaka February 3, 2026 20:39 View session

Copilot started reviewing on behalf of Mossaka February 3, 2026 20:40 View session

Mossaka and others added 2 commits February 3, 2026 20:40

Merge origin/main into PR branch

616f871

Merge main and regenerate agentic workflows

7fe8d71

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Mossaka added the smoke label Feb 3, 2026

Copilot AI reviewed Feb 3, 2026

View reviewed changes

Add changeset [skip-ci]

9c29dca

Copilot started work on behalf of Mossaka February 3, 2026 20:48 View session

Update awf to v0.13.2 with chroot fix

68e2e63

Bumps gh-aw-firewall from v0.13.1 to v0.13.2 which includes the fix for --enable-chroot with preset agent images (PR #459). Co-Authored-By: Claude Opus 4.5 <[email protected]>

Mossaka added smoke and removed smoke labels Feb 3, 2026

github-actions bot mentioned this pull request Feb 4, 2026

Smoke Test: Copilot - 21654549649 #13629

Closed

This was referenced Feb 4, 2026

Add fallback to create issue on discussion failure #13569

Merged

Smoke Test: Copilot - 21657153264 #13646

Closed

Smoke Test: Claude - 21657153252 #13647

Closed

Mossaka and others added 2 commits February 4, 2026 05:12

Merge origin/main into copilot/use-enable-chroot-mode-again

6c8c179

github-actions bot added pr-action:fast-track pr-agent:copilot pr-priority:high pr-risk:high pr-type:feature labels Feb 4, 2026

github-actions bot mentioned this pull request Feb 4, 2026

[PR Triage Report] PR Triage Report - 2026-02-04 #13669

Open

Merge origin/main - accept deleted workflows

d821d08

Mossaka added smoke and removed smoke labels Feb 4, 2026

github-actions bot removed the smoke label Feb 4, 2026

github-actions bot mentioned this pull request Feb 4, 2026

Smoke Test: Copilot - 21661433345 #13672

Closed

Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags #13576

Are you sure you want to change the base?

Use AWF --enable-chroot mode and remove unnecessary --mount and --env flags #13576

Uh oh!

Conversation

Copilot AI commented Feb 3, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Background

Blocked By

Changes Required

Benefits

Documentation

Comments on the Issue (you are @copilot in this section)

Changeset

Changeset

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

Mossaka commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 4, 2026

Uh oh!

github-actions bot commented Feb 4, 2026

Agent Container Tool Check ✅

Uh oh!

github-actions bot commented Feb 4, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Feb 4, 2026

Uh oh!

github-actions bot commented Feb 4, 2026

🔍 PR Triage Results

Scores Breakdown

📋 Recommended Action: fast_track

Uh oh!

github-actions bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 4, 2026

Uh oh!

github-actions bot commented Feb 4, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Feb 4, 2026

Uh oh!

github-actions bot commented Feb 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Copilot AI commented Feb 3, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading

github-actions bot commented Feb 4, 2026 •

edited

Loading

github-actions bot commented Feb 4, 2026 •

edited

Loading

github-actions bot commented Feb 4, 2026 •

edited

Loading

github-actions bot commented Feb 4, 2026 •

edited

Loading