Comment 1 for bug 1962035

/etc/apparmor.d/abstractions/libvirt-qemu is shipped by libvirt-daemon-system, reassigning. I can reproduce this, and I'll attempt to work on a fix. I'll update the Debian bug as well.

Complete copy&paste-able reproducer:

virt-install --connect qemu:///system --quiet --os-variant fedora28 --memory 128 --name test --wait -1 --disk size=0.125,format=qcow2 --graphics vnc,listen=127.0.0.1 --graphics spice,listen=127.0.0.1 --print-xml 1 | sed "s/<os/& firmware='efi'/" > /tmp/test1.xml
virsh define /tmp/test1.xml
touch /var/lib/libvirt/novell.iso
virt-install --connect qemu:///system --reinstall test --wait -1 --noautoconsole --cdrom /var/lib/libvirt/novell.iso --autostart