Skip to content

Apparmor detection does not work correctly #259

@ahpnils

Description

@ahpnils

👻 Brief Description

Current Apparmor detection is based on /etc/init.d/apparmor's existence. However, it is not enough. The apparmor packages can be installed, but if the underlying kernel does not have Apparmor feature compiled in, any attempt to start the daemon will fail.

🥞 Cookbook version

5.2.3

👩‍🍳 Chef-Infra Version

18.0.155

🎩 Platform details

Debian 11 and 12, Ubuntu 20.04 through 24.04.

Steps To Reproduce

Steps to reproduce the behavior:

  1. Run GitHub CI
  2. Ubuntu 22.04 and 24.04 fail

🚓 Expected behavior

The cookbook should not try to start the apparmor service if the feature is not available

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions