playbooks/roles/openldap/tasks/debian.yml in the file, there is remove apparmor, but ubuntu os depends on snap, snap depends on apparmor, so i think we should remove this code
- name: Remove Apparmor package
vars:
package_name:
- apparmor
package_state: absent
package_purge: true
include_role:
name: safe_yum