My Linux kernel must have been configured with user_namespaces when built, but their use is restricted after boot and has to be explicitly enabled. Which sysctl should I use?
(If this was turned on, this would allow to run an isolation command like
unshare --user --map-root-user --mount-proc --pid --fork, and then perform
chroot without being root--a much anticipated feature of Linux.)