apt: enable seccomp sandbox

apt/files/51apt-sandbox

+APT::Sandbox::Seccomp "true";

apt/tasks/main.yml

@@ -24,13 +24,16 @@
 
 - meta: flush_handlers
 
-- name: ensure fix of /tmp script bug
+- name: ensure apt and dpkg are configured
   copy:
-    src: 50debconf-exec-tmp
+    src: "{{ item }}"
     dest: /etc/apt/apt.conf.d/
     owner: root
     group: root
     mode: '0644'
+  with_items:
+    - 50debconf-exec-tmp
+    - 51apt-sandbox
   tags:
     - config
     - apt