Comment 20 for bug 1432644

Revision history for this message
Serge Hallyn (serge-hallyn) wrote : Re: [Bug 1432644] Re: VM permanently tries to read /dev/shm/lttng-ust-wait-5

Quoting Petter Adsen (<email address hidden>):
> Sorry for not being clearer, I got rid of liblttng-ust0, but it still
> fails:
>
> Unable to complete install: 'internal error: process exited while connecting to monitor: 2015-04-02T11:15:40.061933Z qemu-system-x86_64: -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channel/target/fedora20-2.org.qemu.guest_agent.0,server,nowait: Failed to bind socket: Permission denied
> '
> Traceback (most recent call last):
> File "/usr/share/virt-manager/virtManager/asyncjob.py", line 91, in cb_wrapper
> callback(asyncjob, *args, **kwargs)
> File "/usr/share/virt-manager/virtManager/create.py", line 1819, in do_install
> guest.start_install(meter=meter)
> File "/usr/share/virt-manager/virtinst/guest.py", line 403, in start_install
> noboot)
> File "/usr/share/virt-manager/virtinst/guest.py", line 467, in _create_guest
> dom = self.conn.createLinux(start_xml or final_xml, 0)
> File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3422, in createLinux
> if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self)
> libvirtError: internal error: process exited while connecting to monitor: 2015-04-02T11:15:40.061933Z qemu-system-x86_64: -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channel/target/fedora20-2.org.qemu.guest_agent.0,server,nowait: Failed to bind socket: Permission denied
>
> journalctl -f:
> april 02 13:17:54 monster audit[23690]: <audit-1400> apparmor="DENIED" operation="open" profile="libvirt-3d049f0b-f90d-4ef6-af58-6a2e2b238adb" name="/sys/devices/system/node/" pid=23690 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=119 ouid=0
> april 02 13:17:54 monster audit[23690]: <audit-1400> apparmor="DENIED" operation="open" profile="libvirt-3d049f0b-f90d-4ef6-af58-6a2e2b238adb" name="/sys/devices/system/cpu/" pid=23690 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=119 ouid=0
> april 02 13:17:54 monster kernel: audit: type=1400 audit(1427973474.093:50): apparmor="DENIED" operation="open" profile="libvirt-3d049f0b-f90d-4ef6-af58-6a2e2b238adb" name="/sys/devices/system/node/" pid=23690 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=119 ouid=0
> april 02 13:17:54 monster kernel: audit: type=1400 audit(1427973474.093:51): apparmor="DENIED" operation="open" profile="libvirt-3d049f0b-f90d-4ef6-af58-6a2e2b238adb" name="/sys/devices/system/cpu/" pid=23690 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=119 ouid=0
> april 02 13:17:54 monster audit[23690]: <audit-1400> apparmor="DENIED" operation="mknod" profile="libvirt-3d049f0b-f90d-4ef6-af58-6a2e2b238adb" name="/var/lib/libvirt/qemu/channel/target/fedora20-2.org.qemu.guest_agent.0" pid=23690 comm="qemu-system-x86" requested_mask="c" denied_mask="c" fsuid=119 ouid=119
> april 02 13:17:54 monster kernel: audit: type=1400 audit(1427973474.137:52): apparmor="DENIED" operation="mknod" profile="libvirt-3d049f0b-f90d-4ef6-af58-6a2e2b238adb" name="/var/lib/libvirt/qemu/channel/target/fedora20-2.org.qemu.guest_agent.0" pid=23690 comm="qemu-system-x86" requested_mask="c" denied_mask="c" fsuid=119 ouid=119
> april 02 13:17:54 monster systemd-machined[23691]: Machine qemu-fedora20-2 terminated.
> april 02 13:17:54 monster libvirtd[23179]: failed to connect to monitor socket: No such process
> april 02 13:17:54 monster libvirtd[23179]: internal error: process exited while connecting to monitor: 2015-04-02T11:17:54.139331Z qemu-system-x86_64: -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channel/target/fedora20-2.org.qemu.guest_agent.0,server,nowait: Failed to bind socket: Permission denied
>
> Should I file this as a new report?

Yes, please do.

In the meantime, you can bypass apparmor by doing

sudo aa-complain /etc/apparmor.d/usr.sbin.libvirtd

then restarting libvirt-bin