Making AOSP’s nsjail Work with AppArmor (Ubuntu 24.04)
TL;DR On Ubuntu 24.04 (kernel 6.8) with kernel.apparmor_restrict_unprivileged_userns=1, our AOSP 16 (also applicable to 15 and similar versions) builds showed:
Android & Mobile Development
Engineering field notes
Practical DevOps & Infrastructure Notes
Tested guides for Linux, cloud, containers, and self-hosted services.
Latest articles
Android & Mobile Development
Fixing nsjail “Permission denied” on Ubuntu 24.04 when Building AOSP
TL;DR If your AOSP build fails with: it almost always means your system is blocking unprivileged user namespaces under AppArmor.
Cloud, Linux & Virtualization
Initialize & Persistently Mount an External USB Disk on Ubuntu Server 24.04
— THIS GUIDE ERASES THE ENTIRE TARGET DISK — Data-destructive warning: The steps below wipe the whole disk (wipefs -a,
DevOps & Software Delivery
Use Sonatype Nexus as a Docker Registry Mirror
This guide builds on my earlier posts (read first): We won’t repeat previous steps. This post only covers: creating the
DevOps & Software Delivery
Host Your Own Docker Images on Sonatype Nexus 3 OSS (HTTPS via HAProxy, Ubuntu 24.04)
Why use Nexus as a Docker Registry? If you already run Sonatype Nexus and don’t want to stand up Harbor,
DevOps & Software Delivery
Install Sonatype Nexus 3 on Ubuntu 24.04 with HTTPS
Overview Part A — Install Nexus 1. Become root 2. Create service user & base folders 3. Download & extract
Identity, Security & PKI
Enable Trivy on an Existing Harbor 2.14.0
TL;DR Stop Harbor → run ./prepare –with-trivy once → start Harbor. Because you previously had no scanner, Trivy becomes the
Containers & Kubernetes
Upgrade Harbor 2.13.1 → 2.14.0 on Ubuntu 24.04
TL;DR: This upgrades Harbor 2.13.1 → 2.14.0 for the exact setup from my previous guide:Install Harbor 2.13.1 on Ubuntu 24.04
Cloud, Linux & Virtualization
Increase a KVM qcow2 Disk Offline (Ubuntu 24.04 + LVM)
Goal: grow /var/lib/libvirt/images/rbe-b.qcow2 offline on the host, then expand LVM inside the Ubuntu 24.04 guest. TL;DR (commands only) Host (VM
Android & Mobile Development
Setting Up a Buildbarn RBE Cluster for AOSP (Ubuntu 24.04, From Source)
Topology What you get TL;DR Build the five binaries with Bazelisk, create storage/worker file pools, drop the Jsonnet files under