Comment 65 for bug 1759920

It works so far with apparmor=0, and jams without it. I'll keep running it for a while to see if it stays stable.

I used a slightly different method of getting the latest microcode:
sudo apt-mark unhold intel-microcode
sudo apt upgrade

This ran update-initramfs on 4.13.0-38, so everything should be up to date.

Also, I don't have sssd installed.