boklm pushed to branch main at The Tor Project / Applications / tor-browser-build
Commits:
-
bd033876
by NoisyCoil at 2024-06-01T10:49:06+02:00
1 changed file:
Changes:
| ... | ... | @@ -78,12 +78,18 @@ The build system is based on rbm, which is included as a git submodule |
| 78 | 78 | in the rbm/ directory. You can fetch the rbm git submodule by running
|
| 79 | 79 | 'make submodule-update'.
|
| 80 | 80 | |
| 81 | -The build uses user_namespaces(7), which are disabled by default on Debian.
|
|
| 82 | -To enable them you can use the following command as root:
|
|
| 81 | +The build uses user_namespaces(7), which are disabled by default on Debian
|
|
| 82 | +and on Ubuntu v24.04 and later. To enable them on Debian you can use the
|
|
| 83 | +following command as root:
|
|
| 83 | 84 | |
| 84 | 85 | # sysctl -w kernel.unprivileged_userns_clone=1
|
| 85 | 86 | |
| 86 | -You can enable them permanently by adding the setting to /etc/sysctl.d/
|
|
| 87 | +To enable them on Ubuntu v24.04 and later, you can use the following command
|
|
| 88 | +as root:
|
|
| 89 | + |
|
| 90 | + # sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
|
|
| 91 | + |
|
| 92 | +You can enable them permanently by adding the settings to /etc/sysctl.d/
|
|
| 87 | 93 | |
| 88 | 94 | The user you use to build needs to have a range of subordinate uids and
|
| 89 | 95 | gids in /etc/subuid and /etc/subgid. Most of the time they are added by
|