spark-store-project/amber-ce-bookworm
15
0
Fork 0
mirror of https://gitee.com/amber-ce/amber-ce-bookworm.git synced 2025-12-16 20:11:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix-apparmor

Browse Source
This commit is contained in:
shenmo
2024-06-20 22:31:58 +08:00
parent a388a710a5
commit d90e4cf529
3 changed files with 12 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/usr/lib/sysctl.d/amber-ce.conf Normal file
View File

@@ -0,0 +1,6 @@
# ACE app runs in a container, need privileges within user namespace, so we need to set it
kernel.unprivileged_userns_clone=1
# Ubuntu 24.04 has more limitation on unprivileged user namespace,so we have to disable them.
# refer to https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces
kernel.apparmor_restrict_unprivileged_unconfined=0
kernel.apparmor_restrict_unprivileged_userns=0