fix: Disable apparmor_restrict_unprivileged_userns

k1LoW · Jan 20, 2025 · 9b55403 · 9b55403
1 parent d8fa44c
commit 9b55403
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -22,6 +22,9 @@ jobs:
           go-version-file: go.mod
           check-latest: true
 
+      - name: Disable apparmor_restrict_unprivileged_userns # ref: https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
       - name: Check oldstable
         uses: k1LoW/oldstable@v1