AppArmor config documented in man page doesn't work with pipx

[bjackman]

mkosi commit the issue has been seen with

main

Used host distribution

Ubuntu 24.04.1

Used target distribution

No response

Linux kernel version used

No response

CPU architectures issue was seen on

None

Unexpected behaviour you saw

In #3265 I reported issues with unprivileged user namespace creation on locked-down distros and documented a solution for Ubuntu 24.04.1.

However, I've just realised this is incompatible with the pipx installation method documented on the README. It only works for me when I run mkosi directly from the repo.

I've asked for help here as I guess this is something of an expert AppArmor configuration topic.

Perhaps in the meantime we should just document that Ubuntu users should avoid pipx installation?

Used mkosi config

No response

mkosi output

No response