add apparmor

because docker running on ubuntu requires it