Enable user namespaces in the Debian package

[fmarier]

Lots of users are having problems (e.g. https://twitter.com/robdavies1978/status/1154709097184411648) installing Brave on Debian because of the extra step of enabling user namespaces.

Maybe we should do it for them by shipping a /etc/sysctl.d/brave.conf file containing:

kernel.unprivileged_userns_clone = 1

and then doing a sysctl -p /etc/sysctl.d/brave.conf in the postinst script.

[fmarier]

Perhaps we should do this in brave-keyring to avoid having to patch the Chromium source.

[fmarier]

Fixed in the brave-keyring 1.5 package (i.e. not tied to a particular brave-browser release).

[tbergeron]

@fmarier could that new package update have caused this:

[ anon@xps ~  ] sudo apt upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] y
Setting up brave-keyring (1.4) ...
OK
sysctl: cannot stat /proc/sys/kernel/unprivileged_userns_clone: No such file or directory
dpkg: error processing package brave-keyring (--configure):
 installed brave-keyring package post-installation script subprocess returned error exit status 255
Errors were encountered while processing:
 brave-keyring
E: Sub-process /usr/bin/dpkg returned an error code (1)

just curious, I cannot figure out how to fix this and am wondering if it's normal? thanks!

[fmarier]

Yes, we had a problem with version 1.4 of the package. This should be fixed in 1.5 though. Try apt update && apt upgrade.