doc/frc971.conf

# Put this file in /etc/sysctl.d/ to enable Bazel's sandboxing on Debian
# kernels.
# Run `sudo sysctl --system` to load it without rebooting.

kernel.unprivileged_userns_clone = 1