Add apparmor UKI addon through sysupdate

Valentin David requested to merge valentindavid/apparmor-sysupdate into master

Though not strongly required, this is needed for snapd to have proper confinement.

Our kernel has selinux by default (even though it is not active in runtime). But it is not stackable with apparmor. This addon allows to switch to apparmor.

/usr/lib/systemd/systemd-sysupdate --component=apparmor update

Then reboot.

Depends on:

Edited by Valentin David

Merge request reports