Testing the disable Apparmor

Author: Kaniska244

.github/workflows/smoke-anaconda.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-base-alpine.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns      
+
     - name: Smoke test
       id: smoke_test
       uses: ./.github/actions/smoke-test

.github/workflows/smoke-base-debian.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-base-ubuntu.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-cpp.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       id: smoke_test
       uses: ./.github/actions/smoke-test

.github/workflows/smoke-dotnet.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       id: smoke_test
       env:

.github/workflows/smoke-go.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-java.yaml

@@ -22,6 +22,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test java
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-javascript-node.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-jekyll.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       id: smoke_test
       uses: ./.github/actions/smoke-test

.github/workflows/smoke-miniconda.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-php.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-python.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-ruby.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-rust.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-typescript-node.yaml

@@ -21,6 +21,11 @@ jobs:
       id: checkout
       uses: actions/checkout@v3
 
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+
     - name: Smoke test
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smoke-universal.yaml

@@ -19,9 +19,25 @@ jobs:
     - name: Checkout
       id: checkout
       uses: actions/checkout@v3
+    - name: Disable AppArmor
+      run: |
+       set -e
+       echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns
+    - name: Get userUid from host machine
+      id: get-useruid
+      run: |
+       set -e
+       USER_UID=$(id -u)
+       USER_GID=$(id -g)
+       echo "UserUid::$USER_UID"
+       echo "UserGid::$USER_GID"
+       echo "USER_UID=$USER_UID" >> $GITHUB_ENV
+       echo "USER_GID=$USER_GID" >> $GITHUB_ENV      
     - name: Smoke test
       env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          USER_UID: ${{ env.USER_UID }}
+          USER_GID: ${{ env.USER_GID }}           
       id: smoke_test
       uses: ./.github/actions/smoke-test
       with:

src/universal/.devcontainer/devcontainer.json

@@ -6,8 +6,11 @@
     "features": {
         "ghcr.io/devcontainers/features/common-utils:2": {
             "username": "codespace",
-            "userUid": "1000",
-            "userGid": "1000"
+		    //Getting the UID & GID values of the host machine via GitHub actions
+            //"userUid": "1000",
+            //"userGid": "1000"
+            "userUid": "${localEnv:USER_UID}",
+            "userGid": "${localEnv:USER_GID}"
         },
         "ghcr.io/devcontainers/features/dotnet:2": {
             "version": "8.0",