From 3e183a987fd3d73a937df5461883fcf963e3a11a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?I=C3=B1igo=20Garcia=20Olaizola?=
 <11333576+igolaizola@users.noreply.github.com>
Date: Wed, 29 Jan 2025 12:04:40 +0100
Subject: [PATCH] ci: disable AppArmor to allow Chrome sandbox (#511)

Fixes #512
---
 .github/workflows/ci.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8450f14d..81f1eb3b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,6 +31,12 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
+      - name: Disable AppArmor
+        if: runner.os == 'Linux'
+        run: |
+          # Disable AppArmor for Ubuntu 23.10+.
+          # https://chromium.googlesource.com/chromium/src/+/main/docs/security/apparmor-userns-restrictions.md
+          echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with: