diff options
| author | Luca Boccassi <bluca@debian.org> | 2024-06-16 12:16:21 +0200 |
|---|---|---|
| committer | Luca Boccassi <bluca@debian.org> | 2024-06-17 12:12:36 +0200 |
| commit | 4cfcde024f34b3e5f682364d4e0c6185ef07d467 (patch) | |
| tree | d1e26c41cc08fd2850f1c4e5f5fe437a800380f3 /mkosi.images/system/mkosi.extra | |
| parent | Merge pull request #33355 from YHNdnzj/shutdown-cad (diff) | |
| download | systemd-4cfcde024f34b3e5f682364d4e0c6185ef07d467.tar.xz systemd-4cfcde024f34b3e5f682364d4e0c6185ef07d467.zip | |
mkosi: enable unprivileged user ns for integration tests
Ubuntu disables them by default in Noble, ship a sysctl to turn them back on
so that tests can use them
Diffstat (limited to 'mkosi.images/system/mkosi.extra')
| -rw-r--r-- | mkosi.images/system/mkosi.extra/usr/lib/sysctl.d/99-apparmor-unpriv-userns.conf | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/mkosi.images/system/mkosi.extra/usr/lib/sysctl.d/99-apparmor-unpriv-userns.conf b/mkosi.images/system/mkosi.extra/usr/lib/sysctl.d/99-apparmor-unpriv-userns.conf new file mode 100644 index 0000000000..657ac72f8d --- /dev/null +++ b/mkosi.images/system/mkosi.extra/usr/lib/sysctl.d/99-apparmor-unpriv-userns.conf @@ -0,0 +1,4 @@ +# Ubuntu since Noble disables unprivileged user namespaces by default, re-enable them as they are needed +# for integration tests +kernel.apparmor_restrict_unprivileged_unconfined = 0 +kernel.apparmor_restrict_unprivileged_userns = 0 |