Once I cleared all the references to 'tunables/global' the PROC variable from the /etc/apparmor.d/* files the container seems to be able to start.