Fix pipeline (Ubuntu restricted user namespaces)

tun2proxy · Dec 24, 2024 · 4e651a8 · 4e651a8
1 parent 9f5d99d
commit 4e651a8
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -18,5 +18,11 @@ jobs:
           check-latest: true
           go-version-file: 'go.mod'
 
+      # cf. https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
+      - name: Allow Unconfined NS
+        run: |
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_unconfined=0
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
       - name: Run Tests
         run: make test