Added bubblewrap / apparmor fixes and diagnostic tools for troubleshooting it on related distros.

install.sh

@@ -44,6 +44,7 @@ usage()
 		"" \
 		"  --install-dir PATH  Store the app, managed game, and runtime data at PATH." \
 		"                      Default: ~/Games/PristontaleEU" \
+		"  --skip-deps        Do not install packages or repair host AppArmor profiles." \
 		"  --skip-runtime-bootstrap" \
 		"                      Do not prepare the verified UMU helper during install."
 }
@@ -184,6 +185,11 @@ fi
 
 if (( DRY_RUN == 1 ))
 then
+	if (( INSTALL_DEPENDENCIES == 1 ))
+	then
+		printf '%s\n' \
+			"Dry run: installation would probe Bubblewrap and offer only the guarded Ubuntu AppArmor repair."
+	fi
 	exit 0
 fi
 
@@ -339,6 +345,18 @@ then
 fi
 
 printf '%s\n' "Launcher files installed."
+CONTAINER_HOST_READY=1
+if (( INSTALL_DEPENDENCIES == 1 ))
+then
+	printf '%s\n' "Checking Steam Runtime sandbox permissions."
+	if ! "${BIN_HOME}/pristontale-eu" container-host --repair
+	then
+		CONTAINER_HOST_READY=0
+	fi
+else
+	printf '%s\n' "Steam Runtime sandbox repair skipped with host dependencies."
+fi
+
 RUNTIME_BOOTSTRAP_READY=1
 if (( RUN_RUNTIME_BOOTSTRAP == 1 ))
 then
@@ -381,6 +399,14 @@ case ":${PATH:-}:" in
 		;;
 esac
 
+if (( CONTAINER_HOST_READY == 0 ))
+then
+	printf '%s\n' \
+		"Launcher files were installed, but Bubblewrap cannot create the Steam Runtime sandbox." \
+		"Retry with: ${BIN_HOME}/pristontale-eu container-host --repair" >&2
+	exit 1
+fi
+
 if (( RUNTIME_BOOTSTRAP_READY == 0 ))
 then
 	printf '%s\n' \