From f6041665eae7ba2341219bdf39c4d784bf571773 Mon Sep 17 00:00:00 2001
From: David Cook <dcook@divviup.org>
Date: Tue, 15 Oct 2024 14:16:12 -0500
Subject: [PATCH] CI: Enable unprivileged user namespaces

---
 .github/workflows/ci-build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 4aead92f6..32de738ee 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -30,6 +30,8 @@ jobs:
       CARGO_TERM_COLOR: always
       RUSTFLAGS: "-D warnings"
     steps:
+    - name: 'Workaround for issue #3178'
+      run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
     - name: Set default input values
       id: default-input-values
       run: |