Configure sanboxing in e2e tests

Also, run cancellation test outside sandbox to avoid problems with resolving PID

Author: ishulgin

.github/workflows/e2e.yml

@@ -17,6 +17,14 @@ jobs:
       - uses: actions/setup-node@v6
         with:
           node-version: '24'
+      - name: Condfigure sandboxing
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes bubblewrap
+          sudo sysctl -w kernel.unprivileged_userns_clone=1
+          if [ -f /proc/sys/kernel/apparmor_restrict_unprivileged_userns ]; then
+            sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          fi
       - name: Install dependencies
         run: npm ci
       - name: Run e2e tests

src/__tests__/CodexACPAgent/e2e/acp-e2e-shell-approval.test.ts

@@ -135,9 +135,7 @@ describeE2E("E2E shell cancellation tests", () => {
     }
 
     it("cancels a running shell command", async () => {
-        fixture = await createAuthenticatedFixture();
-        fixture.setPermissionResponder(createPermissionResponder("execute", ApprovalOptionId.AllowOnce));
-
+        fixture = await createAuthenticatedFixture(AgentMode.AgentFullAccess);
         const sessionId = (await fixture.createSession()).sessionId;
         const pidFilePath = path.join(fixture.workspaceDir, "cancel-command.pid");
         const command = `/bin/sh -c 'echo $$ > "${pidFilePath}"; exec sleep 100'`;