OK can you try this:
-
lxc image delete <fingerprint>
for the image you just downloaded. - Delete any instances created from the image that won’t start.
- Refresh your snap onto the
latest/candidate
channel temporarily (this will get you LXD 4.24 which is going to be inlatest/stable
very soon, you can move back tolatest/stable
once LXD 4.24 lands there). - Then try again. It will be interesting to see if you still get the AppArmor denials then, as we may need to add additional allow rules to the AppArmor profile for image unpacking. Although we are not seeing that issue locally in our tests.