test: enable unpriv user namespaces

These are disabled by default in some distros; we would like to test rootless, however. Signed-off-by: Casey Callendrello <[email protected]>
containernetworking · Jan 14, 2025 · c85121c · c85121c
1 parent ba8bc7d
commit c85121c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/test_linux.sh b/test_linux.sh
@@ -40,4 +40,8 @@ done
 
 # Run the pkg/ns tests as non root user
 mkdir -p /tmp/cni-rootless
+if [ "$(sysctl -bn kernel.unprivileged_userns_clone)" -ne "1" ]; then
+    echo "sudo sysctl -w kernel.unprivileged_userns_clone=1"
+    sudo sysctl -w kernel.unprivileged_userns_clone=1
+fi
 (export XDG_RUNTIME_DIR=/tmp/cni-rootless; cd pkg/ns/; unshare -rmn go test)