It works so far with apparmor=0, and jams without it. I'll keep running it for a while to see if it stays stable.
I used a slightly different method of getting the latest microcode: sudo apt-mark unhold intel-microcode sudo apt upgrade
This ran update-initramfs on 4.13.0-38, so everything should be up to date.
Also, I don't have sssd installed.
It works so far with apparmor=0, and jams without it. I'll keep running it for a while to see if it stays stable.
I used a slightly different method of getting the latest microcode:
sudo apt-mark unhold intel-microcode
sudo apt upgrade
This ran update-initramfs on 4.13.0-38, so everything should be up to date.
Also, I don't have sssd installed.