Public bug reported:

From Ubuntu 24.04,  apparmor is enabled by default, and restricts the
use of unprivileged user namespaces.  This change make yocto project,
which use bitbake as build tool failed to build on ubuntu24.04.


Related bug:  https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2056555

Yocto link:
https://www.yoctoproject.org/
Bitbake doc:
https://docs.yoctoproject.org/bitbake.html

Quick build steps:
1. git clone git://git.yoctoproject.org/poky
2. cd poky
3. source oe-init-build-env
4. bitbake core-image-minimal

I am opening this bug for requesting add a default profile for bitbake.
Since user may clone yocto project anywhere on the host,  it is not a
fixed path, so I recommends the following profile:

$ cat /etc/apparmor.d/bitbake

abi <abi/4.0>,
include <tunables/global>
profile bitbake /**/bitbake/bin/bitbake flags=(unconfined) {
        userns,
}

** Affects: apparmor (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2072615

Title:
  Request to add  a  default profile for bitbake

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2072615/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to