错误类似如下：

The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /tmp/.xxxxx/chrome-sandbox is owned by root and has mode 4755.

解决方案：

sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

注意这个只对启动有效，重启后就无效了