Try fixing CI

varqox · Oct 15, 2024 · 2e6cae4 · 2e6cae4
1 parent ef78716
commit 2e6cae4
Showing 1 changed file with 10 additions and 10 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -8,7 +8,7 @@ jobs:
       image: debian:bookworm
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -28,7 +28,7 @@ jobs:
       image: ubuntu:24.04
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -48,7 +48,7 @@ jobs:
       image: fedora:39
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -67,7 +67,7 @@ jobs:
       image: archlinux
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -86,7 +86,7 @@ jobs:
       image: debian:bookworm
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -107,7 +107,7 @@ jobs:
       image: debian:bookworm
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -127,7 +127,7 @@ jobs:
       image: ubuntu:24.04
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -147,7 +147,7 @@ jobs:
       image: fedora:39
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -166,7 +166,7 @@ jobs:
       image: archlinux
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup
@@ -185,7 +185,7 @@ jobs:
       image: debian:bookworm
       options: --security-opt seccomp=unconfined --privileged --security-opt systempaths=unconfined # needed to make clone3() work in the container, and mount cgroup2 read-write, and /proc mountable
     steps:
-      - run: sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+      - run: echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - run: mount -t cgroup2 -o nsdelegate,remount none /sys/fs/cgroup
       - run: useradd tester
       - run: chown -R tester:tester /sys/fs/cgroup