NOVA VM creation fails, qemu-kvm permision denied on shared library files

Bug #1900687 reported by Daniyal Omer Suri
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
New
Undecided
Unassigned

Bug Description

Description:
============
While deploying openstack Train through TripleO. Deployment is successful but the Nova VM creation fails because qemu-kvm libvirt error.

Steps to reproduce:
===================
Deploy Train through TripleO on Centos7

When creating VMs libvirt error occurs in nova_libvirt logs:
2020-10-20 10:04:44.273+0000: 46336: error : qemuProcessReportLogError:1924 : internal error: qemu unexpectedly closed the monitor: /usr/libexe│···································································
c/qemu-kvm: error while loading shared libraries: libseccomp.so.2: cannot open shared object file: Permission denied

Issue was found in SeLinux policies as once selinux was put in permissive mode:
setenforce 0 (on compute node)

VM Creation was successfull.

Expected result:
================
VM should have gone up without tweeking SeLinux.

Actual Result:
==============
VM Creation fails.

Environemt:
===========
TripleO Openstack Train
CentOS7
With and without External Ceph Cluster (same behavior in both)
Neutron with OpenVSwitch

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.