cannot load AppArmor profile 'libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6'

[Thomas Schweikle]

virt-manager throws error "cannot load AppArmor profile 'libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6'".

The profile is there:
# ll
insgesamt 59
drwxr-xr-x 2 root root 7 Aug 25 12:58 ./
drwxr-xr-x 9 root root 27 Aug 25 09:35 ../
-rw-r--r-- 1 root root 293 Aug 25 12:57 libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6
-rw-r--r-- 1 root root 293 Aug 25 12:01 libvirt-54ea41ed-6765-4265-b0e5-a74496ee0d21
-rw-r--r-- 1 root root 293 Aug 25 12:21 libvirt-7d734af8-b634-4ae8-a5ea-38e6eed4bcd6
-rw-r--r-- 1 root root 342 Jun 1 11:58 TEMPLATE.lxc
-rw-r--r-- 1 root root 192 Jun 1 11:58 TEMPLATE.qemu

It is readable by everyone.

ProblemType: Bug
DistroRelease: Ubuntu 21.10
Package: virt-manager 1:3.2.0-3
ProcVersionSignature: Ubuntu 5.13.0-14.14-generic 5.13.1
Uname: Linux 5.13.0-14-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu68
Architecture: amd64
CasperMD5CheckResult: pass
Date: Wed Aug 25 14:20:23 2021
InstallationDate: Installed on 2021-08-18 (7 days ago)
InstallationMedia: Xubuntu 21.04 "Hirsute Hippo" - Release amd64 (20210420)
PackageArchitecture: all
SourcePackage: virt-manager
UpgradeStatus: No upgrade log present (probably fresh install)

[Christian Ehrhardt  (paelzer)]

Hi Thomas,
It usually means that there is some rule in there generated file that makes it fail to load.
/etc/apparmor.d/libvirt/libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6 is only the generic part.
The generated bit is in the .files extension.

That .files content is generated from the XML that defines the guest on startup.

Could you check if you'd consider anything in those files confidential to you (contains guest and disk names). If you are ok, could you please attach the following to this bug so that we can think what might be wrong:

- /etc/apparmor.d/libvirt/libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6
- /etc/apparmor.d/libvirt/libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6.files
- The output of "virsh dumpxml <yourguestname>"
- the output of "sudo apparmor_parser -r /etc/apparmor.d/libvirt/libvirt-3edcea34-7a68-49ed-b6fb-3621d6fe9fa6"

[Launchpad Janitor (janitor)]

[Expired for virt-manager (Ubuntu) because there has been no activity for 60 days.]