Codex CLI Installation Guide: Setup on macOS, Linux, Windows WSL and CI/CD

# Option 1: npm (recommended)
npm install -g @openai/codex-cli

# Option 2: Homebrew
brew install openai-codex

# Option 3: Direct download
curl -fsSL https://cli.openai.com/install.sh | bash

# Verify installation
codex --version

# Permission error on npm global install
sudo npm install -g @openai/codex-cli
# Better: fix npm permissions
mkdir ~/.npm-global
npm config set prefix '~/.npm-global'
echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.zshrc
source ~/.zshrc
npm install -g @openai/codex-cli

# Apple Silicon (M1/M2/M3) specific
# If you get architecture errors:
arch -arm64 npm install -g @openai/codex-cli

# Install Node.js if not present
curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
sudo apt-get install -y nodejs

# Install Codex CLI
npm install -g @openai/codex-cli

# Verify
codex --version

# If you get EACCES errors:
sudo npm install -g @openai/codex-cli --unsafe-perm

# Install Node.js
curl -fsSL https://rpm.nodesource.com/setup_22.x | sudo bash -
sudo dnf install -y nodejs

# Install Codex CLI
npm install -g @openai/codex-cli

# 1. Install WSL2 if not already done (PowerShell as Admin)
# wsl --install

# 2. Inside WSL2 (Ubuntu):
curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
sudo apt-get install -y nodejs

# 3. Install Codex CLI
npm install -g @openai/codex-cli

# 4. Verify
codex --version

# Note: Run Codex inside WSL2, not native Windows CMD/PowerShell

FROM node:22-slim

# Install Codex CLI
RUN npm install -g @openai/codex-cli

# Set up workspace
WORKDIR /workspace

# Configure API key at runtime
ENV OPENAI_API_KEY=""

ENTRYPOINT ["codex"]

# Build and run
docker build -t codex-cli .
docker run -it \
  -e OPENAI_API_KEY="your-key" \
  -v $(pwd):/workspace \
  codex-cli "explain this project"

# Option 1: Environment variable (recommended)
export OPENAI_API_KEY="your-openai-api-key"

# Option 2: Use Crazyrouter for cheaper access
export OPENAI_API_KEY="your-crazyrouter-key"
export OPENAI_BASE_URL="https://crazyrouter.com/v1"

# Option 3: Config file
mkdir -p ~/.codex
cat > ~/.codex/config.json << 'EOF'
{
  "apiKey": "your-key",
  "baseUrl": "https://crazyrouter.com/v1",
  "model": "o4-mini",
  "maxTokens": 8192
}
EOF

# Add to shell profile for persistence
echo 'export OPENAI_API_KEY="your-key"' >> ~/.bashrc
echo 'export OPENAI_BASE_URL="https://crazyrouter.com/v1"' >> ~/.bashrc
source ~/.bashrc

# HTTP proxy
export HTTP_PROXY="http://proxy.company.com:8080"
export HTTPS_PROXY="http://proxy.company.com:8080"
export NO_PROXY="localhost,127.0.0.1,.company.com"

# SOCKS proxy
export ALL_PROXY="socks5://proxy.company.com:1080"

# npm proxy (for installation)
npm config set proxy http://proxy.company.com:8080
npm config set https-proxy http://proxy.company.com:8080

# Then install
npm install -g @openai/codex-cli

# If your company uses SSL inspection with custom CA
export NODE_EXTRA_CA_CERTS="/path/to/company-ca.pem"

# Or disable SSL verification (not recommended for production)
export NODE_TLS_REJECT_UNAUTHORIZED=0

name: AI Code Review
on: [pull_request]

jobs:
  codex-review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        with:
          node-version: '22'

      - name: Install Codex CLI
        run: npm install -g @openai/codex-cli

      - name: Run AI Code Review
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
          OPENAI_BASE_URL: "https://crazyrouter.com/v1"
        run: |
          codex --once "Review the code changes in this PR. \
            Focus on bugs, security issues, and performance. \
            Output as markdown."

codex-review:
  image: node:22-slim
  stage: review
  script:
    - npm install -g @openai/codex-cli
    - codex --once "Review recent changes for bugs and security issues"
  variables:
    OPENAI_API_KEY: $OPENAI_API_KEY
    OPENAI_BASE_URL: "https://crazyrouter.com/v1"
  only:
    - merge_requests

pipeline {
    agent { docker { image 'node:22-slim' } }
    environment {
        OPENAI_API_KEY = credentials('openai-api-key')
        OPENAI_BASE_URL = 'https://crazyrouter.com/v1'
    }
    stages {
        stage('AI Review') {
            steps {
                sh 'npm install -g @openai/codex-cli'
                sh 'codex --once "Analyze this build for potential issues"'
            }
        }
    }
}

#!/bin/bash
# setup-codex.sh - Team onboarding script

set -e

echo "🤖 Setting up Codex CLI..."

# Check Node.js
if ! command -v node &> /dev/null; then
    echo "❌ Node.js not found. Installing..."
    curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
    sudo apt-get install -y nodejs
fi

NODE_VERSION=$(node --version | cut -d'v' -f2 | cut -d'.' -f1)
if [ "$NODE_VERSION" -lt 18 ]; then
    echo "❌ Node.js 18+ required. Current: $(node --version)"
    exit 1
fi

# Install Codex CLI
echo "📦 Installing Codex CLI..."
npm install -g @openai/codex-cli

# Configure
echo "⚙️ Configuring..."
mkdir -p ~/.codex

# Use team API gateway
cat > ~/.codex/config.json << 'EOF'
{
  "baseUrl": "https://crazyrouter.com/v1",
  "model": "o4-mini",
  "maxTokens": 8192,
  "confirmCommands": true
}
EOF

echo ""
echo "✅ Codex CLI installed successfully!"
echo ""
echo "Next steps:"
echo "  1. Set your API key: export OPENAI_API_KEY='your-crazyrouter-key'"
echo "  2. Add to ~/.bashrc for persistence"
echo "  3. Run 'codex' in any project directory"
echo ""
codex --version

# Check npm global bin path
npm config get prefix
# Add to PATH if needed
export PATH="$(npm config get prefix)/bin:$PATH"

# Check if proxy is needed
curl -I https://api.openai.com
# If blocked, set proxy or use Crazyrouter
export OPENAI_BASE_URL="https://crazyrouter.com/v1"

# Check your balance
curl https://api.openai.com/v1/usage \
  -H "Authorization: Bearer $OPENAI_API_KEY"

# Switch to Crazyrouter for lower costs
export OPENAI_BASE_URL="https://crazyrouter.com/v1"

# Use streaming for faster perceived response
codex --stream "your prompt"

# Reduce context by excluding large files
echo "node_modules/\ndist/\n*.lock" > .codexignore