vh/forgefirm
1
0
Fork 0
mirror of https://github.com/openglow-org/forgefirm.git synced 2026-09-29 09:31:17 -07:00
Code Issues Packages Projects Releases Wiki Activity

Cold build: allow unprivileged user namespaces on the noble runner

Browse Source 
BitBake isolates the network of its tasks with a user namespace, and the ubuntu-24.04 hosted runner's AppArmor profile refuses that to an unprivileged process, so the cold build stopped before its first task (run 34381825302). The workflow lifts the restriction for the run; nothing in the layers or the image changes.
This commit is contained in:
ScottW514
2026-09-09 13:22:12 -04:00
parent b2f50ad765
commit 867b1938e4
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/yocto-cold-build.yml
+6
View File
@@ -52,6 +52,12 @@ jobs:
sudo locale-gen en_US.UTF-8 sudo locale-gen en_US.UTF-8
pip3 install kas pip3 install kas
# BitBake isolates the network of its tasks with a user namespace;
# the ubuntu-24.04 runner's AppArmor profile refuses that to an
# unprivileged process, so the build would stop before its first task.
- name: Allow unprivileged user namespaces (BitBake network isolation)
run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
- name: Build (rm_work, release image only) - name: Build (rm_work, release image only)
working-directory: forgefirm working-directory: forgefirm
run: kas build kas/forgefirm-glowforge.yml:kas/ci.yml run: kas build kas/forgefirm-glowforge.yml:kas/ci.yml