NVIDIA / enroot

A simple yet powerful tool to turn traditional container/OS images into unprivileged sandboxes.
Apache License 2.0
649 stars 94 forks source link

Enroot Apparmor error on Ubuntu Jammy #201

Open twh opened 4 months ago

twh commented 4 months ago

Upgrading a test host on my cluster to 3.5 and Apparmor fails to load: AppArmor parser error for /etc/apparmor.d/enroot in profile /etc/apparmor.d/enroot at line 1: Could not open 'abi/4.0': No such file or directory

flx42 commented 4 months ago

We need to fix this, but for your Ubuntu version (22.04) you should be able to just disable the enroot apparmor profile:

$ sudo ln -s /etc/apparmor.d/enroot /etc/apparmor.d/disable/enroot

The apparmor profile is required for Ubuntu 23.10 and above: https://ubuntu.com/blog/ubuntu-23-10-restricted-unprivileged-user-namespaces