why do I have to use backports kernel to make LXC work on Bookworm?

[Harald Dunkel <harri@afaics.de>]

Hi folks,

apparently LXC is affected by a bug around apparmor support for months,
see #1052934 and #1050256. The workaround is to set PrivateNetwork=false
(set by default as a security measure) or to use a backports kernel.

AFAIU reason is a bug in 6.1. The fix (1cf26c3d2c4c) is not a one-liner,
but reasonably small, and it has already been verified, so how comes it
is still in the loop for weeks?


Regards

Harri