google-chrome Failed to move to new namespace

Question

Im trying to run google-chrome --headless inside a docker container as a non-root user to execute some tests. Everytime Im trying to start it, it throws following error:

Answer 1

Although this doesn't answer your question, since it you can't set security-opt, this is still a good solution for other people with a similar problem finding the question.

Download this chrome.json file, which contains a custom security profile.

Use the security profile with --security-opt seccomp=path/to/chrome.json or with docker-compose:

# docker-compose.yml
version: '3'
services:
  :
    #
    # the service configuration
    #
    security_opt:
      - seccomp=

see https://stackoverflow.com/a/53975412/8678740