diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d922ea7..8d1466e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -78,6 +78,8 @@ jobs:
         with:
           extra-conf: |
             sandbox = false
+      - name: Configure permissions
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 || true
       - name: Setup Nix cache
         uses: DeterminateSystems/flakehub-cache-action@v3
         with:
@@ -103,6 +105,8 @@ jobs:
         with:
           extra-conf: |
             sandbox = false
+      - name: Configure permissions
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 || true
       - name: Setup Nix cache
         uses: DeterminateSystems/flakehub-cache-action@v3
         with: