Nix silently refuses to setup a userns for the sandbox if kernel.unprivileged_userns_clone=0 #14914
Description
Describe the bug
Originally reported in #8165, then closed by author, lost on the pile, and referenced again by author. Still needs triage.
Steps To Reproduce
sysctl -w kernel.unprivileged_userns_clone=0; see #8165
Expected behavior
Success or explicit failure.
Metadata
Additional context
Checklist
- checked latest Nix manual (source)
- checked open bug issues and pull requests for possible duplicates
Add 👍 to issues you find important.