Add AppArmor documentation

.github/release_template.md

@@ -31,6 +31,8 @@ Download and run the `Wagyu.Key.Gen-X.X.X.dmg` asset.  Run the `Wagyu Key Gen` a
 
 Download the `Wagyu.Key.Gen-X.X.X.AppImage` asset, [make it executable](https://itsfoss.com/use-appimage-linux/) and launch it from your desktop environment, often by double clicking on it, or from your terminal.
 
+### Missing FUSE
+
 On Ubuntu 22.04 or later, you might need [to install libfuse2](https://github.com/AppImage/AppImageKit/wiki/FUSE) first before running the AppImage asset with something like:
 
 ```
@@ -38,6 +40,13 @@ sudo add-apt-repository universe
 sudo apt install libfuse2
 ```
 
+On Ubuntu 24.04, the the libfuse2 package was renamed to libfuse2t64:
+
+```
+sudo add-apt-repository universe
+sudo apt install libfuse2t64
+```
+
 As an alternative to having FUSE, you can manually extract the AppImage asset and run it. In a Terminal, it would look like:
 
 ```
@@ -47,6 +56,33 @@ cd squashfs-root
 ./AppRun
 ```
 
+### AppArmor restrictions
+
+On Ubuntu 24.04 and some distros, the default AppArmor configuration might restrict you from running the AppImage asset with an error message like this one:
+
+```
+The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now.
+```
+
+As a workaround, you can temporarily disable the AppArmor restrictions by running this command:
+
+```
+sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+```
+
+Alternatively, you can create an AppArmor profile for this file by creating a file in `/etc/apparmor.d/wagyu-key-gen` with the following content (make sure to replace `/path/to/Wagyu.Key.Gen.AppImage` with the full path to your AppImage asset):
+
+```
+abi <abi/4.0>,
+include <tunables/global>
+
+profile wagyukeygen /path/to/Wagyu.Key.Gen.AppImage flags=(default_allow) {
+  userns,
+
+  include if exists <local/wagyu-key-gen>
+}
+```
+
 # Building process
 
 Release assets were built using Github Actions and [this workflow run](`[WORKFLOW-RUN-URL]`). You can establish the provenance of this build using [our artifact attestations](https://github.com/stake-house/wagyu-key-gen/attestations).