uname -a
id
dpkg-query -W '-f=${Package}	${Version}	${Architecture}
' bubblewrap criu apparmor libc6 util-linux
sysctl kernel.unprivileged_userns_clone kernel.apparmor_restrict_unprivileged_userns kernel.yama.ptrace_scope user.max_user_namespaces
/usr/bin/bwrap --version
/usr/local/sbin/criu --version
/home/ubuntu/timbal/.venv/bin/python --version
getcap /usr/bin/bwrap /usr/local/sbin/criu /usr/local/sbin/monolith-setpriv
stat -Lc '%n %a %U:%G %s' /usr/bin/bwrap /usr/local/sbin/criu /usr/local/sbin/monolith-setpriv
/usr/local/sbin/monolith-setpriv --clear-groups /usr/bin/bwrap --ro-bind /usr /usr --symlink usr/lib /lib --ro-bind /etc/ssl /etc/ssl --ro-bind /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf --ro-bind /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu /home/ubuntu/.local/share/uv/python/cpython-3.12.13-linux-aarch64-gnu --ro-bind /home/ubuntu/timbal /home/ubuntu/timbal --bind /tmp/criu-3127-46o9gv34/workspace /workspace --ro-bind /tmp/criu-3127-46o9gv34/workspace/.timbal/criu /workspace/.timbal/criu --tmpfs /tmp --proc /proc --dev-bind /dev/null /dev/null --dev-bind /dev/zero /dev/zero --dev-bind /dev/urandom /dev/urandom --dev-bind /dev/random /dev/random --tmpfs /dev/shm --chdir /workspace --unshare-pid --unshare-user --as-pid-1 --uid 0 --gid 0 /home/ubuntu/timbal/.venv/bin/python -u /workspace/.timbal/criu/warmup_shim.py /workspace
