Decktape failes on `ubuntu-latest` (gh actions and azure devops)

[nicojs]

See the CI logs.

Run npm run test:generate-pdfs

> decktape@3.14.0 test:generate-pdfs
> node test/run-decktape.js

listening from http://localhost:37763/ (serving static files from /home/runner/work/decktape/decktape/test)
Generating revealjs-demo
Error: Failed to launch the browser process!
[2455:2455:0414/121532.817385:FATAL:zygote_host_impl_linux.cc(126)] No usable sandbox! Update your kernel or see https://chromium.googlesource.com/chromium/src/+/main/docs/linux/suid_sandbox_development.md for more information on developing with the SUID sandbox. If you want to live dangerously and need an immediate workaround, you can try using --no-sandbox.
[0414/121532.826196:ERROR:file_io_posix.cc(145)] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_cur_freq: No such file or directory (2)
[0414/121532.826240:ERROR:file_io_posix.cc(145)] open /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq: No such file or directory (2)

[nicojs]

Note that the ubuntu images have been updated on the 8th of April: https://devblogs.microsoft.com/devops/upcoming-updates-for-azure-pipelines-agents-images/#ubuntu

[nicojs]

This seems to work:

sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

Found it here: ungoogled-software/ungoogled-chromium#2804 (comment)

I don't know details about why, though. We might want to document this somewhere?