Merge pull request #2211 from unsatcore/master

tests: more robust check for user namespaces availability (canUseSand…

release-common.nix

@@ -57,7 +57,7 @@ rec {
       git
       mercurial
     ]
-    ++ lib.optional stdenv.isLinux libseccomp
+    ++ lib.optionals stdenv.isLinux [libseccomp utillinux]
     ++ lib.optional (stdenv.isLinux || stdenv.isDarwin) libsodium
     ++ lib.optional (stdenv.isLinux || stdenv.isDarwin)
       (aws-sdk-cpp.override {

tests/common.sh.in

@@ -94,12 +94,10 @@ canUseSandbox() {
         return 1
     fi
 
-    if [ -e /proc/sys/kernel/unprivileged_userns_clone ]; then
-        if [ "$(cat /proc/sys/kernel/unprivileged_userns_clone)" != 1 ]; then
+    if ! unshare --user true ; then
         echo "Unprivileged user namespaces disabled by sysctl, skipping this test..."
         return 1
     fi
-    fi
 
     return 0
 }