fix(ci): uninstall apparmor to work-around a compatibilty issue with …

…bitbake

Signed-off-by: Cedric Hombourger <[email protected]>

.github/workflows/apparmor-policy-bitbake/action.yml

@@ -0,0 +1,27 @@
+#
+# Copyright (c) Siemens AG, 2025
+#
+# This file is subject to the terms and conditions of the MIT License.
+# See COPYING file in the top-level directory.
+#
+# SPDX-License-Identifier: MIT
+
+name: 'let bitbake create user namespaces'
+description: 'Remove AppArmor to work-around a compatibility issue with bitbake'
+runs:
+  using: "composite"
+  steps:
+      - name:  create AppArmor policy for bitbake
+        run: |
+          pol=/etc/apparmor.d/bitbake
+          echo 'abi <abi/4.0>,' | sudo tee ${pol}
+          echo 'include <tunables/global>,' | sudo tee -a ${pol}
+          echo 'profile bitbake /**/bitbake/bin/bitbake flags=(unconfined) {' | sudo tee -a ${pol}
+          echo '    userns,' | sudo tee -a ${pol}
+          echo '}' | sudo tee -a ${pol}
+        shell: bash
+      - name:  load AppArmor policy for bitbake
+        run: |
+          cat /etc/apparmor.d/bitbake
+          sudo apparmor_parser -r /etc/apparmor.d/bitbake
+        shell: bash

.github/workflows/main.yml

@@ -40,6 +40,8 @@ jobs:
         uses: actions/checkout@v4
       - name: Free Disk Space
         uses: ./.github/workflows/free-disk-space
+      - name: Configure AppArmor for bitbake
+        uses: ./.github/workflows/apparmor-policy-bitbake
       - name: Cache downloads and sstate
         uses: actions/cache@v4
         with: