I tried overriding the symlinks with hardlinks on openSUSE TW[1] but I'm running into the same error. Updated usr.bin.pasta AppArmor profile with the rules shared here additionally, invoking `pasta` gives: > mount /: Permission denied > Failed to sandbox process, exiting `passt` also fails with the same error but not before displaying (template) interface details. In the package changes, I've added a profile for pasta, a replica of usr.bin.passt jfyi. [1] - https://build.opensuse.org/projects/home:danishprakash:branches:Virtualization:containers/packages/passt/files/passt.spec?expand=1