From 3e183a987fd3d73a937df5461883fcf963e3a11a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?I=C3=B1igo=20Garcia=20Olaizola?=
<11333576+igolaizola@users.noreply.github.com>
Date: Wed, 29 Jan 2025 12:04:40 +0100
Subject: [PATCH] ci: disable AppArmor to allow Chrome sandbox (#511)
Fixes #512
---
.github/workflows/ci.yml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8450f14..81f1eb3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,6 +31,12 @@ jobs:
test:
runs-on: ubuntu-latest
steps:
+ - name: Disable AppArmor
+ if: runner.os == 'Linux'
+ run: |
+ # Disable AppArmor for Ubuntu 23.10+.
+ # https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md
+ echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
- uses: actions/checkout@v4
- uses: actions/setup-go@v5
with:
--
GitLab