ci: Disable apparmor restriction on unprivileged userns

Author: afq984

.github/workflows/ci.yml

@@ -38,5 +38,8 @@ jobs:
           disk-cache: ${{ github.workflow }}
           repository-cache: true
 
+      - name: Disable AppArmor restriction on user namespaces
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
       - name: Test
         run: bazel test //...