Security: Ubuntu’s CrackArmor fixes deserve a real runbook if you run Kubernetes or OpenStack on Ubuntu

Canonical’s new AppArmor guidance makes the priority clear: apply both kernel updates and userspace mitigations, especially where attacker-controlled containers may run. The practical lesson for platform teams is that host hardening advice is only useful if it becomes an explicit patch-and-reboot workflow with exposure checks.