I don't know why your system has a `/etc/apparmor.d/bwrap` file. However, using setcap on bwrap shouldn't be needed as long as apparmor doesn't restrict it from using unprivileged user namespaces and as long as sysctl kernel.apparmor_restrict_unprivileged_userns=0. But glad that it's finally working.
Also don't trust AI too much or you'll end up with broken system with weird issues.
|