Activity log for bug #1927519

Date Who What changed Old value New value Message
2021-05-06 16:00:32 Ioanna Alifieraki bug added bug
2021-05-06 16:00:38 Ioanna Alifieraki libvirt (Ubuntu): importance Undecided Medium
2021-05-06 16:00:41 Ioanna Alifieraki libvirt (Ubuntu): status New Confirmed
2021-05-07 12:07:47 Utkarsh Gupta bug added subscriber Christian Ehrhardt 
2021-05-10 11:14:43 Christian Ehrhardt  tags libvirt-21.10
2021-05-10 11:17:25 Christian Ehrhardt  bug added subscriber Ubuntu Server
2021-06-17 08:01:52 Christian Ehrhardt  tags libvirt-21.10 libvirt-22.04
2021-11-04 17:19:11 Ioanna Alifieraki nominated for series Ubuntu Focal
2021-11-04 17:19:11 Ioanna Alifieraki bug task added libvirt (Ubuntu Focal)
2021-11-04 17:19:11 Ioanna Alifieraki nominated for series Ubuntu Hirsute
2021-11-04 17:19:11 Ioanna Alifieraki bug task added libvirt (Ubuntu Hirsute)
2021-11-04 17:19:11 Ioanna Alifieraki nominated for series Ubuntu Bionic
2021-11-04 17:19:11 Ioanna Alifieraki bug task added libvirt (Ubuntu Bionic)
2021-11-04 17:19:11 Ioanna Alifieraki nominated for series Ubuntu Impish
2021-11-04 17:19:11 Ioanna Alifieraki bug task added libvirt (Ubuntu Impish)
2021-11-04 17:19:11 Ioanna Alifieraki nominated for series Ubuntu Jammy
2021-11-04 17:19:11 Ioanna Alifieraki bug task added libvirt (Ubuntu Jammy)
2021-11-04 17:19:27 Ioanna Alifieraki libvirt (Ubuntu Impish): status New Confirmed
2021-11-04 17:19:29 Ioanna Alifieraki libvirt (Ubuntu Hirsute): status New Confirmed
2021-11-04 17:19:31 Ioanna Alifieraki libvirt (Ubuntu Focal): status New Confirmed
2021-11-04 17:19:34 Ioanna Alifieraki libvirt (Ubuntu Bionic): status New Confirmed
2021-11-04 17:19:37 Ioanna Alifieraki libvirt (Ubuntu Bionic): importance Undecided Medium
2021-11-04 17:19:39 Ioanna Alifieraki libvirt (Ubuntu Focal): importance Undecided Medium
2021-11-04 17:19:40 Ioanna Alifieraki libvirt (Ubuntu Hirsute): importance Undecided Medium
2021-11-04 17:19:42 Ioanna Alifieraki libvirt (Ubuntu Impish): importance Undecided Medium
2021-11-04 17:23:09 Ioanna Alifieraki bug task added cloud-archive
2021-11-04 17:24:07 Ioanna Alifieraki nominated for series cloud-archive/queens
2021-11-04 17:24:07 Ioanna Alifieraki bug task added cloud-archive/queens
2021-11-04 17:24:07 Ioanna Alifieraki nominated for series cloud-archive/ussuri
2021-11-04 17:24:07 Ioanna Alifieraki bug task added cloud-archive/ussuri
2021-11-04 17:24:07 Ioanna Alifieraki nominated for series cloud-archive/stein
2021-11-04 17:24:07 Ioanna Alifieraki bug task added cloud-archive/stein
2021-11-11 10:47:33 Christian Ehrhardt  libvirt (Ubuntu Jammy): status Confirmed In Progress
2021-11-11 13:41:31 Launchpad Janitor merge proposal linked https://code.launchpad.net/~paelzer/ubuntu/+source/libvirt/+git/libvirt/+merge/411755
2021-11-18 08:22:21 Christian Ehrhardt  libvirt (Ubuntu Jammy): status In Progress Fix Committed
2021-11-18 08:22:41 Christian Ehrhardt  libvirt (Ubuntu Impish): status Confirmed In Progress
2021-11-18 08:22:41 Christian Ehrhardt  libvirt (Ubuntu Impish): assignee Christian Ehrhardt  (paelzer)
2021-11-18 08:22:55 Christian Ehrhardt  libvirt (Ubuntu Hirsute): status Confirmed In Progress
2021-11-18 08:22:55 Christian Ehrhardt  libvirt (Ubuntu Hirsute): assignee Christian Ehrhardt  (paelzer)
2021-11-18 08:22:59 Christian Ehrhardt  libvirt (Ubuntu Focal): status Confirmed In Progress
2021-11-18 08:22:59 Christian Ehrhardt  libvirt (Ubuntu Focal): assignee Christian Ehrhardt  (paelzer)
2021-11-18 08:23:05 Christian Ehrhardt  libvirt (Ubuntu Bionic): status Confirmed In Progress
2021-11-18 08:23:05 Christian Ehrhardt  libvirt (Ubuntu Bionic): assignee Christian Ehrhardt  (paelzer)
2021-11-18 09:07:34 Christian Ehrhardt  description [Impact] Some times libvirt fails to start a vm with the following error : libvirt: error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory This happens because for some reason file /etc/apparmor.d/libvirt/libvirt-<vm-uuid> has 0 size. Although, we do not now why the above file gets truncated and therefore we do not know the root cause, I open this bug to come up with a way to mitigate the issue. E.g. when libvirt sees that this file is 0-size to delete it and create it again. [Test case] To reproduce this behaviour, create a vm and stop it, note the uuid. Then : ## touch /etc/apparmor.d/libvirt/libvirt-<vm-uuid> # touch /etc/apparmor.d/libvirt/libvirt-b05b297f-952f-42d6-b04e-f9a13767db54 # ls -la libvirt-b05b297f-952f-42d6-b04e-f9a13767db54 -rw-r--r-- 1 root root 0 May 6 18:46 libvirt-b05b297f-952f-42d6-b04e-f9a13767db54 Try to start the vm, it will fail with : libvirt: error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory To be able to start the vm again just delete the libvirt-<vm-uuid> file. [Regression Potential] TBD [Other] Similar reported bug : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890084 [Impact] Some times libvirt fails to start a vm with the following error : libvirt: error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory This happens because for some reason the apparmor profile for the guest /etc/apparmor.d/libvirt/libvirt-<vm-uuid> has 0 size. We do not now why the above file gets truncated to begin with and therefore we do not know the root cause to fix it there. But the condition is easy to detect and 100% broken, so we can detect and recreate the file in those cases. [Test case] To reproduce this behaviour, create a vm and stop it, note the uuid. For example: $ uvt-simplestreams-libvirt --verbose sync --source http://cloud-images.ubuntu.com/daily arch=amd64 label=daily release=focal $ uvt-kvm create --password=ubuntu f release=focal arch=amd64 label=daily $ virsh dominfo f ... Security label: libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 (enforcing) $ virsh shutdown f Then make the start apparmor profile an empty file. On Bionic/Focal that file will be non-existant by default (cleaned on guest stop), on Hirsute/Impish it will be around for admin-edit but with content. Therefore "touch" isn't enough every time, instead really put nothing to it as that is how the real issue looks like). $ cat /dev/null | sudo tee /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 # ensure it is size zero $ ll /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 -rw-r--r-- 1 root root 0 Nov 18 09:01 /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 Next try to start the vm, it will try to use the file it found (instead of creating a new one as it would when non-existing) and will fail doing so: $ virsh start f error: internal error: Process exited prior to exec: libvirt: error : unable to set AppArmor profile 'libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1' for '/usr/bin/qemu-system-x86_64': No such file or directory To manually be able to start the vm again just delete the libvirt-<vm-uuid> file. With the fix applied libvirt will recreate the file and guest start works again. [Regression Potential] The new code is only active when the size of the file is zero which is a 100% guarantee that the guest is broken and won't start. Nevertheless if we made a mistake in the fix the area (of the many things libvirt does) to look at is the generating and usage of apparmor profiles. [Other] Similar reported bug : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890084
2021-11-18 09:32:40 Launchpad Janitor merge proposal linked https://code.launchpad.net/~paelzer/ubuntu/+source/libvirt/+git/libvirt/+merge/412064
2021-11-18 09:32:50 Launchpad Janitor merge proposal linked https://code.launchpad.net/~paelzer/ubuntu/+source/libvirt/+git/libvirt/+merge/412065
2021-11-18 09:33:02 Launchpad Janitor merge proposal linked https://code.launchpad.net/~paelzer/ubuntu/+source/libvirt/+git/libvirt/+merge/412066
2021-11-18 09:33:12 Launchpad Janitor merge proposal linked https://code.launchpad.net/~paelzer/ubuntu/+source/libvirt/+git/libvirt/+merge/412067
2021-11-18 11:37:50 Alejandro Santoyo Gonzalez bug added subscriber Alejandro Santoyo Gonzalez
2021-11-19 13:02:03 Ioanna Alifieraki attachment added lp1927519_queens.debdiff https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1927519/+attachment/5542088/+files/lp1927519_queens.debdiff
2021-11-19 13:02:41 Ioanna Alifieraki attachment added lp1927519_stein.debdiff https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1927519/+attachment/5542089/+files/lp1927519_stein.debdiff
2021-11-19 13:02:42 Ioanna Alifieraki attachment added lp1927519_stein.debdiff https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1927519/+attachment/5542090/+files/lp1927519_stein.debdiff
2021-11-19 13:02:45 Ioanna Alifieraki attachment added lp1927519_stein.debdiff https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1927519/+attachment/5542091/+files/lp1927519_stein.debdiff
2021-11-19 13:03:21 Ioanna Alifieraki attachment added lp1927519_ussuri.debdiff https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1927519/+attachment/5542092/+files/lp1927519_ussuri.debdiff
2021-11-19 13:04:57 Ioanna Alifieraki tags libvirt-22.04 libvirt-22.04 sts-sru-sponsor
2021-11-19 16:27:59 Ubuntu Foundations Team Bug Bot tags libvirt-22.04 sts-sru-sponsor libvirt-22.04 patch sts-sru-sponsor
2021-11-19 16:28:07 Ubuntu Foundations Team Bug Bot bug added subscriber Ubuntu Sponsors Team
2021-11-19 21:06:09 Brian Murray removed subscriber Ubuntu Sponsors Team
2021-11-22 07:12:22 Christian Ehrhardt  description [Impact] Some times libvirt fails to start a vm with the following error : libvirt: error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory This happens because for some reason the apparmor profile for the guest /etc/apparmor.d/libvirt/libvirt-<vm-uuid> has 0 size. We do not now why the above file gets truncated to begin with and therefore we do not know the root cause to fix it there. But the condition is easy to detect and 100% broken, so we can detect and recreate the file in those cases. [Test case] To reproduce this behaviour, create a vm and stop it, note the uuid. For example: $ uvt-simplestreams-libvirt --verbose sync --source http://cloud-images.ubuntu.com/daily arch=amd64 label=daily release=focal $ uvt-kvm create --password=ubuntu f release=focal arch=amd64 label=daily $ virsh dominfo f ... Security label: libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 (enforcing) $ virsh shutdown f Then make the start apparmor profile an empty file. On Bionic/Focal that file will be non-existant by default (cleaned on guest stop), on Hirsute/Impish it will be around for admin-edit but with content. Therefore "touch" isn't enough every time, instead really put nothing to it as that is how the real issue looks like). $ cat /dev/null | sudo tee /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 # ensure it is size zero $ ll /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 -rw-r--r-- 1 root root 0 Nov 18 09:01 /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 Next try to start the vm, it will try to use the file it found (instead of creating a new one as it would when non-existing) and will fail doing so: $ virsh start f error: internal error: Process exited prior to exec: libvirt: error : unable to set AppArmor profile 'libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1' for '/usr/bin/qemu-system-x86_64': No such file or directory To manually be able to start the vm again just delete the libvirt-<vm-uuid> file. With the fix applied libvirt will recreate the file and guest start works again. [Regression Potential] The new code is only active when the size of the file is zero which is a 100% guarantee that the guest is broken and won't start. Nevertheless if we made a mistake in the fix the area (of the many things libvirt does) to look at is the generating and usage of apparmor profiles. [Other] Similar reported bug : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890084 [Impact] Some times libvirt fails to start a vm with the following error : libvirt: error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory This happens because for some reason the apparmor profile for the guest /etc/apparmor.d/libvirt/libvirt-<vm-uuid> has 0 size. We do not now why the above file gets truncated to begin with and therefore we do not know the root cause to fix it there. But the condition is easy to detect and 100% broken, so we can detect and recreate the file in those cases. [Test case] To reproduce this behaviour, create a vm and stop it, note the uuid. For example: $ uvt-simplestreams-libvirt --verbose sync --source http://cloud-images.ubuntu.com/daily arch=amd64 label=daily release=focal $ uvt-kvm create --password=ubuntu f release=focal arch=amd64 label=daily $ virsh dominfo f ... Security label: libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 (enforcing) $ virsh shutdown f Then make the start apparmor profile an empty file. On Bionic/Focal that file will be non-existant by default (cleaned on guest stop), on Hirsute/Impish it will be around for admin-edit but with content. Therefore "touch" isn't enough every time, instead really put nothing to it as that is how the real issue looks like). $ cat /dev/null | sudo tee /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 # ensure it is size zero $ ll /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 -rw-r--r-- 1 root root 0 Nov 18 09:01 /etc/apparmor.d/libvirt/libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1 Next try to start the vm, it will try to use the file it found (instead of creating a new one as it would when non-existing) and will fail doing so: $ virsh start f error: internal error: Process exited prior to exec: libvirt: error : unable to set AppArmor profile 'libvirt-1ceac8db-c1e9-40b2-8ada-a60349454fc1' for '/usr/bin/qemu-system-x86_64': No such file or directory To manually be able to start the vm again just delete the libvirt-<vm-uuid> file. With the fix applied libvirt will recreate the file and guest start works again. In addition (independent to the case) I'll run a set of common regression tests against <release>-proposed which didn't run for a while and would make us also spot if anything other slipped in from different places (like the dwarves hiccup we had). Since testing shall be on "the real build" and resources are limited I'd this time do so only on the builds in proposed. [Regression Potential] The new code is only active when the size of the file is zero which is a 100% guarantee that the guest is broken and won't start. Nevertheless if we made a mistake in the fix the area (of the many things libvirt does) to look at is the generating and usage of apparmor profiles. [Other] Similar reported bug : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890084
2021-11-22 15:48:44 Łukasz Zemczak libvirt (Ubuntu Impish): status In Progress Fix Committed
2021-11-22 15:48:47 Łukasz Zemczak bug added subscriber Ubuntu Stable Release Updates Team
2021-11-22 15:48:49 Łukasz Zemczak bug added subscriber SRU Verification
2021-11-22 15:48:52 Łukasz Zemczak tags libvirt-22.04 patch sts-sru-sponsor libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-impish
2021-11-22 16:17:43 Łukasz Zemczak libvirt (Ubuntu Hirsute): status In Progress Fix Committed
2021-11-22 16:17:49 Łukasz Zemczak tags libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-impish libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-hirsute verification-needed-impish
2021-11-22 16:28:32 Łukasz Zemczak libvirt (Ubuntu Focal): status In Progress Fix Committed
2021-11-22 16:28:38 Łukasz Zemczak tags libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-hirsute verification-needed-impish libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-focal verification-needed-hirsute verification-needed-impish
2021-11-22 17:54:24 Łukasz Zemczak libvirt (Ubuntu Bionic): status In Progress Fix Committed
2021-11-22 17:54:31 Łukasz Zemczak tags libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-focal verification-needed-hirsute verification-needed-impish libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-bionic verification-needed-focal verification-needed-hirsute verification-needed-impish
2021-11-25 09:08:36 Christian Ehrhardt  tags libvirt-22.04 patch sts-sru-sponsor verification-needed verification-needed-bionic verification-needed-focal verification-needed-hirsute verification-needed-impish libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish
2021-11-30 00:47:07 Brian Murray removed subscriber Ubuntu Stable Release Updates Team
2021-11-30 00:51:16 Launchpad Janitor libvirt (Ubuntu Hirsute): status Fix Committed Fix Released
2021-11-30 00:51:49 Launchpad Janitor libvirt (Ubuntu Focal): status Fix Committed Fix Released
2021-11-30 00:55:19 Launchpad Janitor libvirt (Ubuntu Bionic): status Fix Committed Fix Released
2021-11-30 01:31:33 Launchpad Janitor libvirt (Ubuntu Impish): status Fix Committed Fix Released
2021-11-30 19:09:04 Corey Bryant cloud-archive/ussuri: status New Fix Committed
2021-11-30 19:09:06 Corey Bryant tags libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-ussuri-needed
2021-11-30 20:12:55 Corey Bryant cloud-archive/stein: status New Fix Committed
2021-11-30 20:12:56 Corey Bryant tags libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-ussuri-needed libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-stein-needed verification-ussuri-needed
2021-11-30 20:13:20 Corey Bryant cloud-archive/queens: status New Fix Committed
2021-11-30 20:13:21 Corey Bryant tags libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-stein-needed verification-ussuri-needed libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-queens-needed verification-stein-needed verification-ussuri-needed
2021-11-30 20:20:24 Corey Bryant cloud-archive: status New Fix Committed
2021-12-02 18:01:03 Ioanna Alifieraki tags libvirt-22.04 patch sts-sru-sponsor verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-queens-needed verification-stein-needed verification-ussuri-needed libvirt-22.04 patch verification-done verification-done-bionic verification-done-focal verification-done-hirsute verification-done-impish verification-queens-done verification-stein-done verification-ussuri-done
2021-12-06 19:42:19 Corey Bryant cloud-archive/ussuri: status Fix Committed Fix Released
2021-12-06 19:50:58 Corey Bryant cloud-archive/queens: status Fix Committed Fix Released
2021-12-06 19:54:01 Corey Bryant cloud-archive/stein: status Fix Committed Fix Released
2021-12-06 23:14:08 Launchpad Janitor libvirt (Ubuntu Jammy): status Fix Committed Fix Released
2022-02-02 14:16:18 Corey Bryant cloud-archive: status Fix Committed Fix Released
2022-04-05 13:57:41 Corey Bryant cloud-archive: status Fix Released Fix Committed
2022-04-05 14:45:34 Corey Bryant cve linked 2020-10701
2022-04-05 14:45:34 Corey Bryant cve linked 2020-12430
2022-04-05 14:45:34 Corey Bryant cve linked 2020-14301
2022-04-05 14:45:34 Corey Bryant cve linked 2020-14339
2022-04-05 14:45:34 Corey Bryant cve linked 2021-3667
2022-04-05 14:45:34 Corey Bryant cve linked 2021-4147
2022-04-05 14:45:37 Corey Bryant cloud-archive: status Fix Committed Fix Released