main.yml: Allow creation of user namespaces to unshare in Ubuntu >=24.04

kevin1024 · Jan 17, 2025 · 08a17ed · 08a17ed
1 parent 93bc595
commit 08a17ed
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -51,6 +51,15 @@ jobs:
           pip install codecov '.[tests]' '${{ matrix.urllib3-requirement }}'
           pip check
 
+      - name: Allow creation of user namespaces to unshare command
+        run: |
+          # .. so that we don't get error:
+          # unshare: write failed /proc/self/uid_map: Operation not permitted
+          # Idea inspired by https://github.com/ocaml/opam/issues/5968#issuecomment-2151748424 .
+          set -x
+          sudo ln -s /usr/share/apparmor/extra-profiles/unshare-userns-restrict /etc/apparmor.d/
+          sudo systemctl reload apparmor
+
       - name: Run online tests
         run: ./runtests.sh --cov=./vcr --cov-branch --cov-report=xml --cov-append -m online