Environment: Kubernetes: v1.28.2+k3s1 (k3s) Kubernetes host: Debian 12, running in a LXC container I'm getting the follow error with hubble-ui pod:

2023/10/07 14:13:07 [alert] 1#1: socketpair() failed while spawning "worker process" (13: Permission denied)

Digging further reveals the following:

[  +0.000011] audit: type=1400 audit(1696687987.523:770): apparmor="DENIED" operation="create" info="failed type and protocol match" error=-13 profile="cri-containerd.apparmor.d" pid=380455 comm="nginx" family="unix" sock_type="stream" protocol=0 requested_mask="create" denied_mask="create" addr=none

Any clue what might've caused this?