TL;DR On Ubuntu 24.04 (kernel 6.8) with kernel.apparmor_restrict_unprivileged_userns=1, our AOSP 16 (also applicable to 15 and similar versions) builds showed: … Continue reading Making AOSP’s nsjail Work with AppArmor (Ubuntu 24.04)