Detect when unprivileged user namespaces are disabled

Open debfx opened this issue 5 years ago • 1 comments

Some distros have unprivileged user namespaces disabled by default (e.g. kernel.unprivileged_userns_clone sysctl).

We should detect this and print a proper error (set the sysctl or use bwrap backend).

Sep 27 '20 20:09 debfx

The two sysctls are /proc/sys/kernel/unprivileged_userns_clone (Debian-specific) and /proc/sys/user/max_user_namespaces.

Dec 15 '24 13:12 debfx