From 87818438f65f7009871ae4f397d78f7e12fa50a1 Mon Sep 17 00:00:00 2001 From: k1LoW Date: Mon, 20 Jan 2025 11:13:40 +0900 Subject: [PATCH] fix: Disable apparmor_restrict_unprivileged_userns on CI --- .github/workflows/ci.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index dafec037..97d3600d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,12 +22,12 @@ jobs: go-version-file: go.mod check-latest: true + - name: Disable apparmor_restrict_unprivileged_userns # ref: https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md + run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 + - name: Check oldstable uses: k1LoW/oldstable@v1 - - name: Set up Chrome - uses: browser-actions/setup-chrome@latest - - name: Run tests run: make ci @@ -48,10 +48,10 @@ jobs: go-version-file: go.mod check-latest: true - - name: Set up Chrome - uses: browser-actions/setup-chrome@latest + - name: Disable apparmor_restrict_unprivileged_userns # ref: https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md + run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 - - name: Run tests + - name: Run tests --race run: make race lint: name: Lint