Indeed your dmesg shows that apparmor loads its profiles before the file system gets mounted r/w. Can you please confirm that
systemctl show --no-pager -p After apparmor
includes "local-fs.target"? Does
systemctl list-dependencies local-fs.target
includes "systemd-remount-fs.service"?
If all that is true, can you please boot with "debug" (in the grub "linux" command line), then do
journalctl -ab > /tmp/debug.txt
and attach /tmp/debug.txt here?
Indeed your dmesg shows that apparmor loads its profiles before the file system gets mounted r/w. Can you please confirm that
systemctl show --no-pager -p After apparmor
includes "local-fs.target"? Does
systemctl list-dependencies local-fs.target
includes "systemd- remount- fs.service" ?
If all that is true, can you please boot with "debug" (in the grub "linux" command line), then do
journalctl -ab > /tmp/debug.txt
and attach /tmp/debug.txt here?