disable, and turn off apparmor

roles/1-prep/tasks/main.yml

@@ -23,6 +23,10 @@
             dest=/etc/chrony.conf
             src=chrony.conf.j2
 
+- name: Disable apparmor -- on by default in ubuntu
+  service: name=apparmor enabled=False state=stopped
+  when: is_ubuntu
+
 - name: Disable selinux on next boot
   selinux: state=disabled
   register: selinux_disabled