Can't boot after installing 22.04 beta: Syntax-Error in snap-confine AppArmor

Bug #1967621 reported by Hadmut Danisch
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu
New
Undecided
Unassigned

Bug Description

Hi,

I just installed installed a machine with yesterday's Ubuntu 22.04 beta desktop image, and chose to encrypt the disk, using ZFS.

The machine couldn't boot then and goes into an emergency mode, giving (german, I've chosen that language) error message:

AppArmor-Analysefehler für /etc/apparmor.d/usr.lib.snapd.snap-confine.real in profile /etc/apparmor.d/usr.lib.snapd.snap-confine.read in Zeile 11: >>/var/lib/snapd/apparmor/snap-confine<< ...

...

Failed to start Load AppArmor profiles

The problem did *not* occur, when repeating the same installation without encryption and ZFS. (But since I chose to update the system during installation, is is theoretically possible that the bug had been incidently fixed at the same time).

Tags: bot-comment
Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Libera.chat.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/1967621/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

tags: added: bot-comment
Revision history for this message
Hadmut Danisch (hadmut) wrote :

I've done some debugging.

The problem is:

in line 11 of /etc/apparmor.d/usr.lib.snapd.snap-confine.real is a

#include "/var/lib/snapd/apparmor/snap-confine"

which does not exist at this time. Therefore, the boot process fails.

Reason: the ZFS installer creates a zfs for /var/lib, but this is not yet mounted.

Once running
zfs mount -a

the file exists.

It seems as if the boot process performs querying the password for the filesystem and unlocks, but forgets to mount.

Revision history for this message
Brian Murray (brian-murray) wrote :

I tested an install of Jammy Jellyfish from 20220409 and choose zfs + encrypted. I was able to boot my freshly installed system with no issues.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.