ci: nightly ci now uses ubuntu 24.04+ (#2886)

which needs user namespaces to be re-enabled so that stacker can
build/run

Signed-off-by: Ramkumar Chinchani <[email protected]>

Author: rchincha

.github/workflows/nightly.yaml

@@ -196,6 +196,7 @@ jobs:
           password: ${{ github.token }}
       - name: Run tests
         run: |
+            sudo ./scripts/enable_userns.sh
             ./examples/kind/kind-ci.sh
 
   cloud-scale-out:

scripts/enable_userns.sh

@@ -0,0 +1,11 @@
+#!/bin/sh -xe
+
+# enable user namespaces
+sysctl -w kernel.apparmor_restrict_unprivileged_io_uring=0
+sysctl -w kernel.apparmor_restrict_unprivileged_unconfined=0
+sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+sysctl -w kernel.apparmor_restrict_unprivileged_userns_complain=0
+sysctl -w kernel.apparmor_restrict_unprivileged_userns_force=0
+sysctl -w kernel.unprivileged_bpf_disabled=2
+sysctl -w kernel.unprivileged_userns_apparmor_policy=0
+sysctl -w kernel.unprivileged_userns_clone=1