Permission denied when trying to run Podman Desktop on Ubuntu 24.04 about podman-desktop

[odockal]

Seems like this is the new feature that break podman desktop on ubuntu 24.04: https://discourse.ubuntu.com/t/ubuntu-24-04-lts-noble-numbat-release-notes/39890

[odockal]

dmesg program shows some audit problems:

[  452.099933] audit: type=1400 audit(1716288123.267:88): apparmor="DENIED" operation="userns_create" class="namespace" info="Userns create restricted - failed to find unprivileged_userns profile" error=-13 profile="unconfined" pid=5873 comm="podman-desktop" requested="userns_create" denied="userns_create" target="unprivileged_userns"
[  452.099958] traps: podman-desktop[5873] trap int3 ip:63c7a47e1a8a sp:7ffef7d04220 error:0 in podman-desktop[63c7a0ad6000+8406000]

Leading to a workaround that will unblock running apps in unprivileged namespace: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 which let podman desktop to start in my local ubuntu VM.

[odockal]

I have run a testing workflow: https://github.com/odockal/podman-desktop-extension-bootc/actions/runs/9173447991/job/25222156937 and tests have passed. Seems like the workaround is good enough.

[odockal]

Fixed by: #7266