Bubblewrap + Ubuntu with AppArmor: sandbox fails to start

[teleclimber]

I've been getting this error in Github Actions: "setting up uid map: Permission denied". This was with ubuntu-latest which was Ubuntu 24.04.2 LTS. (Note that it works under Ubuntu 22.04)

It appears to be this issue generally: DevToys-app/DevToys#1373

See this comment for proper fix: DevToys-app/DevToys#1198 (comment)

They say to create an app-armor profile for the application. In this case that would likely be ds-host.

More investigation needed.

[ocdtrekkie]

For Sandstorm we documented disabling apparmor's restriction of this ( see Ubuntu 24.04 in this page: https://docs.sandstorm.io/en/latest/administering/install-troubleshooting/ )

If we are hitting the same restriction, it is a feature that is restricted solely on Ubuntu and not any other Linux flavors, so seems pretty safe to change.