https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c28 --- Comment #28 from Stefano Brivio <sbrivio@redhat.com> --- Jay, (In reply to Jay - from comment #27)

With the proposed changes an unprivileged podman still fails to create the network namespace if apparmor is enabled because of the passt profile.

Did you also replace soft links with hard links (see comment #6)? If you don't, the AppArmor profile for pasta won't be loaded. On openSUSE Tumbleweed for x86_64, as root (or with sudo), you can do: rm /usr/bin/pasta{,.avx2} ln /usr/bin/passt /usr/bin/pasta ln /usr/bin/passt.avx2 /usr/bin/pasta.avx2 and try again -- you don't need to reload AppArmor profiles after this. -- You are receiving this mail because: You are on the CC list for the bug.