A customer is using envbox and setting Coder Agent shutdown scripts, but it doesn't appear these are being executed.

I suspect what's happening is that envbox is failing to propagate signals (especially SIGTERM) to the inner workspace agent process, meaning it never realizes it should be shut down until the whole envbox container and process tree is killed by the OS.