How do I correctly setup namespace sandbox for ungoogled chromium in Solus?

Question

I'm trying to run ungoogled chromium and this is in the readme.

Before you run, you must setup your system so the browser's sandboxing will work. There are two options:
* Use the user namespace sandbox. This is the preferred option.
* Use the SUID sandbox. This should be used on systems that do not have support for user namespaces.

How to setup the SUID sandbox:
1. Rename "chrome_sandbox" to "chrome-sandbox"
2. Set the file mode to 4755
3. Set the group to root

How to setup the user namespace sandbox:
The kernel needs to be configured to allow user namespaces. The method to enable it varies per system. Sometimes it's enabled by default. If it's not, sometimes sysctl can be used to set kernel.unprivileged_userns_clone to 1. There may also be a way to set it via the /sys partition. Specific instructions should be found online.

How do I correctly setup namespace sandbox for chromium in Solus? there's no kernel.unprivileged_userns_clone.

Thank you.

Answer 1

To enable user namespaces on Solus, the following commands should be sufficient.

echo 'kernel.unprivileged_userns_clone=1' | sudo tee -a /etc/sysctl.d/00-local-userns.conf > /dev/null
cat /etc/sysctl.d/*.conf | sudo sysctl -e -p -