| icon | shield-halved |
|---|---|
| description | Required for Sandboxing, Security & Performance |
{% hint style="info" %} Required for Sandboxing, Security & Performance {% endhint %}
Some portable packages use user namespaces for sandboxing, which may be restricted on certain systems.
clone failed: Operation not permitted
user namespaces are not enabled
Check current setting:
sysctl kernel.unprivileged_userns_cloneEnable temporarily:
sudo sysctl -w kernel.unprivileged_userns_clone=1Enable permanently:
echo 'kernel.unprivileged_userns_clone=1' | sudo tee /etc/sysctl.d/userns.conf
sudo sysctl --systemsudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0Some applications accept --no-sandbox flag (use with caution).