The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that code example

sysctl kernel.unprivileged_userns_clone=1