fix: disable fs protected_regular

https://www.kernel.org/doc/Documentation/sysctl/fs.txt

Author: manusa

src/__tests__/configure-environment.test.js

@@ -24,6 +24,11 @@ describe('configure-docker module test suite', () => {
           'sudo apt-get install -y conntrack'
         );
       });
+      test('disables fs protection (HOST_JUJU_LOCK_PERMISSION with minikube 1.31)', () => {
+        expect(logExecSync).toHaveBeenCalledWith(
+          'sudo sysctl fs.protected_regular=0'
+        );
+      });
       test('waits for docker to be ready', () => {
         expect(logExecSync).toHaveBeenCalledWith(
           "docker version -f '{{.Server.Version}} - {{.Client.Version}}'"
@@ -43,6 +48,11 @@ describe('configure-docker module test suite', () => {
           'sudo apt-get install -y conntrack'
         );
       });
+      test('disables fs protection (HOST_JUJU_LOCK_PERMISSION with minikube 1.31)', () => {
+        expect(logExecSync).toHaveBeenCalledWith(
+          'sudo sysctl fs.protected_regular=0'
+        );
+      });
       test('installs cni plugins', () => {
         expect(download.installCniPlugins).toHaveBeenCalledTimes(1);
       });
@@ -63,6 +73,11 @@ describe('configure-docker module test suite', () => {
           'sudo apt-get install -y conntrack'
         );
       });
+      test('disables fs protection (HOST_JUJU_LOCK_PERMISSION with minikube 1.31)', () => {
+        expect(logExecSync).toHaveBeenCalledWith(
+          'sudo sysctl fs.protected_regular=0'
+        );
+      });
       test('installs cni plugins', () => {
         expect(download.installCniPlugins).toHaveBeenCalledTimes(1);
       });

src/configure-environment.js

@@ -26,6 +26,8 @@ const configureEnvironment = async (inputs = {}) => {
   core.info('Updating Environment configuration to support Minikube');
   logExecSync('sudo apt update -y');
   logExecSync('sudo apt-get install -y conntrack');
+  // Resolves: Exiting due to HOST_JUJU_LOCK_PERMISSION: Failed to start host: boot lock: unable to open /tmp/juju-xxnnn: permission denied
+  logExecSync('sudo sysctl fs.protected_regular=0');
   if (driver === 'docker') {
     core.info('Waiting for Docker to be ready');
     await waitForDocker();