Making AOSP’s nsjail Work with AppArmor (Ubuntu 24.04)
TL;DR On Ubuntu 24.04 (kernel 6.8) with kernel.apparmor_restrict_unprivileged_userns=1, our AOSP 16 (also applicable to 15 and similar versions) builds showed: […]
TL;DR On Ubuntu 24.04 (kernel 6.8) with kernel.apparmor_restrict_unprivileged_userns=1, our AOSP 16 (also applicable to 15 and similar versions) builds showed: […]
TL;DR If your AOSP build fails with: it almost always means your system is blocking unprivileged user namespaces under AppArmor.
This guide builds on my earlier posts (read first): We won’t repeat previous steps. This post only covers: creating the
Topology What you get TL;DR Build the five binaries with Bazelisk, create storage/worker file pools, drop the Jsonnet files under
(Build from source • MITM with a dedicated Squid MITM Root CA (self-signed) • Broad caching • Run as proxy
Goal: Compile and install ccache v4.11.3 from source on Ubuntu 24.04, with manpages. Includes expected install output, sanity checks, and
Goal: Build Kiwi TCMS from source on a GUI-less Ubuntu 24.04 Server and run it in development mode (Django runserver
Goal: Install Spark 4.0.0 (Hadoop 3, Connect build) at /opt/spark, but keep Classic mode for now by setting SPARK_CONNECT_MODE=0.We’ll remove
Building Android apps in Docker is a powerful way to create a clean, portable, and reproducible environment, especially useful for
In large-scale Android development, it’s essential to verify each proposed change before it’s merged into the integration branch. This guide