Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Unverified Commit 2d3791e1 authored by uazo's avatar uazo Committed by GitHub
Browse files

[DOCS] #1241 Details on a solution for apparmour in ubuntu 24.04 (PR #1242)

Update README.md with workaround for ubuntu 24.04
parents 4d68d344 4839d000
Loading
Loading
Loading
Loading
+22 −0
Original line number Original line Diff line number Diff line
@@ -91,6 +91,28 @@ you can activate the 'RendererAppContainer' flag from the command line with
  --enable-features=RendererAppContainer
  --enable-features=RendererAppContainer
```
```


### Making Cromite work in Ubuntu 24.04 and its derivatives (kubuntu, etc)
This happens because, starting with Ubuntu 24.04, Apparmor
restricts the use of unprivileged user namespaces. To fix this, you have several options:
#### 1. Creating an apparmor profile for cromite
Create `/etc/apparmor.d/chrome`, and write:
```
abi <abi/4.0>,
include <tunables/global>

profile cromite /home/user/cromite/chrome-lin/chrome flags=(unconfined) {
  userns,

  include if exists <local/chrome>
}
```
replacing the cromite binary path with where you have placed cromite.

Now, run `sudo apparmor_parser -r /etc/apparmor.d/cromite` to apply the changes.
#### 2. Disabling the restriction until next reboot
`sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0`
#### 3. Disabling the restriction permanently
Add `kernel.apparmor_restrict_unprivileged_userns=0` to the file `/etc/sysctl.d/60-apparmor-namespace.conf`.  Create the file if not exists.
### Auto-update setup for linux
### Auto-update setup for linux
working in progress in https://github.com/uazo/cromite/issues/771
working in progress in https://github.com/uazo/cromite/issues/771