Allow the rootless Actions sandbox to create its user namespace

Hop-State: A_06FN8AEE7ENMDW78P3QPJH8 Hop-Proposal: R_06FN8ACPJSGJ9ZES912WFM0 Hop-Task: T_06FN8A73118NFBJ01HP2N10 Hop-Attempt: AT_06FN8A7313S1B4JW6QKCF10
2026-07-11 19:30:53 -07:00
parent 0d7e685b32
commit 3dbebbbf1c
2 changed files with 19 additions and 1 deletions
@@ -61,7 +61,8 @@ services:
    mem_limit: 4g
    pids_limit: 1024
    security_opt:
-      - no-new-privileges:true
+      - seccomp:unconfined
+      - apparmor:unconfined
    volumes:
      - actions-runner-data:/data
    networks: [hopweb]