From aae999ad7851cfc0def039028387d1c04a34eaa7 Mon Sep 17 00:00:00 2001
From: Michael Greenberg <michael@greenberg.science>
Date: Thu, 10 Oct 2024 12:30:25 -0400
Subject: [PATCH] allow unprivileged userns

---
 .github/workflows/test.yaml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index c9709b5..ccfd81e 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -19,12 +19,6 @@ jobs:
         run: |
           sudo apt-get install util-linux expect mergerfs attr pandoc
 
-      - name: Debug unshare install
-        run: |
-          echo unshare is at $(which unshare)
-          findmnt
-          unshare --mount --propagation unchanged --user --pid --fork -- ls
-
       - name: Checkout
         uses: actions/checkout@v4
         with:
@@ -56,6 +50,10 @@ jobs:
     if: github.event.pull_request.draft == false
 
     steps:
+      - name: Allow unprivileged user namespaces (for Ubuntu 24.04)
+        run: |
+          sudo sysctl kernel.apparmor_restrict_unprivileged_userns=0
+
       - name: Install dependencies
         run: |
           sudo apt-get install expect mergerfs attr pandoc
@@ -98,6 +96,10 @@ jobs:
     if: github.event.pull_request.draft == false
 
     steps:
+      - name: Allow unprivileged user namespaces (for Ubuntu 24.04)
+        run: |
+          sudo sysctl kernel.apparmor_restrict_unprivileged_userns=0
+
       - name: Install dependencies
         run: |
           sudo apt-get install expect mergerfs attr pandoc