CI: disable apparmor on ubuntu so chrome can run with sandbox

https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
campersau · Oct 2, 2024 · 321ec29 · 321ec29
1 parent dc85031
commit 321ec29
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -24,6 +24,9 @@ jobs:
           cache: 'npm'
 
       # linux dependencies
+      # https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
+      - run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+        if: matrix.os == 'ubuntu-latest'
       - run: sudo apt update && sudo apt install -y wine64
         if: matrix.os == 'ubuntu-latest' && matrix.node-version == '18'
       - run: wine --version