Detect when unprivileged user namespaces are disabled #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

debfx opened this issue Sep 27, 2020 · 1 comment

Owner

debfx commented Sep 27, 2020

Some distros have unprivileged user namespaces disabled by default (e.g. kernel.unprivileged_userns_clone sysctl).

We should detect this and print a proper error (set the sysctl or use bwrap backend).

Owner Author

debfx commented Dec 15, 2024

The two sysctls are /proc/sys/kernel/unprivileged_userns_clone (Debian-specific) and /proc/sys/user/max_user_namespaces.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment