pyxis: allow unprivileged user namespaces so enroot works on Ubuntu 23.10+ - #1392

Merged

dholt merged 8 commits into

NVIDIA:masterfrom

xiilab:fix/enroot-apparmor-userns

Sep 30, 2026

Commits on Sep 3, 2026

pyxis: allow unprivileged user namespaces so enroot works on Ubuntu 23.10+
Jea-Eok-Kim
committed
ae16fe2

Commits on Sep 7, 2026

fix: scope the enroot userns permission to an AppArmor profile
Jea-Eok-Kim
committed
86ecc83

Commits on Sep 11, 2026

fix(pyxis): converge the AppArmor profile and clean up after the fallback

100milliongold
and
claude
committed
eec281e

Commits on Sep 12, 2026

fix(pyxis): restore only the owned sysctl key, and check the running value

Jea-Eok-Kim
and
claude
committed
72e3d18

Commits on Sep 16, 2026

fix(pyxis): leave sysctl settings this role does not own alone

Jea-Eok-Kim
and
claude
committed
974de01
test(pyxis): pin which host state selects the sysctl restore

Jea-Eok-Kim
and
claude
committed
99d35f1

Commits on Sep 19, 2026

fix(pyxis): stop writing the userns key back, and report instead
Jea-Eok-Kim
committed
50f2b25

Commits on Sep 23, 2026

fix(pyxis): narrow this change to installing the AppArmor profile
100milliongold
committed
1ed8195