Comment 10 for bug 2046486

samba has a test failing[1] because of this, which is blocking systemd from migrating. The same apparmor denials can be seen in the test log. These denials cause systemd-resolved to fail to start in the member-server container, which ultimately causes the test to fail.

We should be able to fix the test for now by just starting the container with security.nesting=true.

[1] https://objectstorage.prodstack5.canonical.com/swift/v1/AUTH_0f9aae918d5b4744bf7b827671c86842/autopkgtest-oracular/oracular/amd64/s/samba/20240709_085237_01da3@/log.gz