Implement /proc/sys/user/max_user_namespaces ?
Open
good first issue
type: enhancement
- Dominant language
- Go
- Stars
- 19.3k
- Forks
- 2k
- Avg merge
- 3d 5h
- Merged PRs (30d)
- 264
Description
### Description
Bubblewrap with option "--disable-userns" enabled fails to run in gvisor due to lack of /proc/sys/user/max_user_namespaces ([relevant code](https://github.com/containers/bubblewrap/blob/9ca3b05ec787acfb4b17bed37db5719fa777834f/bubblewrap.c#L3461C1-L3492C6)). The option "--disable-userns" is set as default by [flatpak](https://github.com/alexlarsson/flatpak/commit/81a2ef87fb4374b051a7b1363f32374ff6b62826), so adding /proc/sys/user/max_user_namespaces will make it possible to build and run flatpak in container with gvisor.
### Is this feature related to a specific bug?
_No response_
### Do you have a specific solution in mind?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.