ci: allow unprivileged user namespaces in build-from-repos

managarm · Dec 29, 2024 · 62951c7 · 62951c7
1 parent 772544d
commit 62951c7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/build-from-repos.yml b/.github/workflows/build-from-repos.yml
@@ -22,6 +22,11 @@ jobs:
               run: |
                   curl https://repos.managarm.org/buildenv/managarm-buildenv.tar.gz -o managarm-rootfs.tar.gz
                   tar xvf managarm-rootfs.tar.gz
+            - name: Permit unprivileged user namespaces
+              run: |
+                  set -x
+                  sudo sysctl -w kernel.apparmor_restrict_unprivileged_unconfined=0
+                  sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
             - name: Prepare build directory
               run: |
                   mkdir build