Test with restricted unprivileged user namespaces

blechschmidt · Dec 29, 2024 · 86a0a8a · 86a0a8a
1 parent 42a58d3
commit 86a0a8a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
@@ -39,6 +39,13 @@ jobs:
           sudo ip6tables -P FORWARD ACCEPT
       #- name: Setup upterm session
       #  uses: lhotari/action-upterm@v1
+
+      # cf. https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
+      - name: Allow Unconfined NS
+        run: |
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_unconfined=0
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
       - name: Populate .env
         env:
           DOTENV: ${{ secrets.DOTENV }}