ci: enable unprivileged namespaces

Author: Proximyst

.github/workflows/push-pr.yaml

@@ -31,7 +31,7 @@ jobs:
     name: Test
     strategy:
       matrix:
-        platform: [ ubuntu-latest, ubuntu-24.04-arm ]
+        platform: [ubuntu-latest, ubuntu-24.04-arm]
       fail-fast: false
     runs-on: ${{ matrix.platform }}
     permissions:
@@ -40,6 +40,11 @@ jobs:
       - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
         with:
           persist-credentials: false
+      # required for bubblewrap tests
+      - name: Enable unprivileged user namespaces
+        run: |
+          sudo sysctl kernel.unprivileged_userns_clone=1
+          sudo sysctl kernel.apparmor_restrict_unprivileged_userns=0
       - run: |
           make test