Best repo, Apparmor and cloud-init

I am in the process of setting up a new Incus server based on Proxmox 9 / Debian 13 and I have a few incus related questions I’d be grateful to have answered.

ATM I have incus installed from the Debian repo. I usually try to minimize the use of external repos but maybe I’d be better off using the Zabbly LTS repo or are the packages in the LTS repo exactly the same as those in the Debian 13 repo? The incus install guide seemed to recommend I stick to the Debian repo if I want to use LTS but maybe I misread it?

Debian 13 / Proxmox 9 has apparmor enabled by default and I suspect that could be the reason why newly created incus containers are failing to start? I had a search of these forums and I found this command which enables my container to start:

incus config set cont-name raw.lxc “lxc.apparmor.profile=unconfined”

Is applying this config setting the best solution to this issue? I suppose I could disable apparmor on my incus server instead and that would probably fix this too but I’d prefer to keep apparmor enabled on the server if it doesn’t cause more trouble than its worth.

Are there any guides to using cloud-init with incus? I tried creating a new incus profile using some code copied from one of the examples here:

and it didn’t work. Instead it caused breakage. I was simply trying to set the timezone using cloud-init and when I booted my container with that profile applied it broke timedatectl somehow.

Thanks!