[Openstack] apparmor libvirt errors

Michael Still mikal at stillhq.com
Fri Jun 12 03:28:02 UTC 2015


What is /run?

Have you perhaps moved where instances are stored away from
/var/lib/nova/instances?

If you have, then you'll need to tweak your apparmor config to point
to the right path.

Cheers,
Michael

On Fri, Jun 12, 2015 at 12:58 PM, Guillermo Alvarado
<guillermoalvarado89 at gmail.com> wrote:
> Hello, I just restarted a VM but it still in hard reboot tast,
>
> I noticed this in the syslog:
>
> 27-ee93-42ea-85b3-3ee59bf2aa10" name="/run/shm/lttng-ust-wait-5" pid=116281
> comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:55 qrof5-pod00-b17-kl02-comp01 kernel: [1126096.314387]
> type=1400 audit(1434075115.757:1833171): apparmor="DENIED" operation="open"
> profile="libvirt-6919fc0b-f6c7-4a66-bfc3-d9df1bc8df10"
> name="/run/shm/lttng-ust-wait-5" pid=44353 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:55 qrof5-pod00-b17-kl02-comp01 kernel: [1126096.317709]
> type=1400 audit(1434075115.761:1833172): apparmor="DENIED" operation="open"
> profile="libvirt-07fcebce-49cb-4b6e-9947-63fc50911107"
> name="/run/shm/lttng-ust-wait-5" pid=40722 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:55 qrof5-pod00-b17-kl02-comp01 kernel: [1126096.317740]
> type=1400 audit(1434075115.761:1833173): apparmor="DENIED" operation="open"
> profile="libvirt-c7bb9447-d71f-4c0e-8b9b-5fb4ebad0c98"
> name="/run/shm/lttng-ust-wait-5" pid=141561 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:56 qrof5-pod00-b17-kl02-comp01 kernel: [1126097.057558]
> type=1400 audit(1434075116.501:1833174): apparmor="DENIED" operation="open"
> profile="libvirt-b65c3a6a-97d5-4d58-9e63-9559c9cd9844"
> name="/run/shm/lttng-ust-wait-5" pid=158420 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:57 qrof5-pod00-b17-kl02-comp01 kernel: [1126098.238771]
> audit_printk_skb: 27 callbacks suppressed
> Jun 11 21:11:57 qrof5-pod00-b17-kl02-comp01 kernel: [1126098.238774]
> type=1400 audit(1434075117.681:1833184): apparmor="DENIED" operation="open"
> profile="libvirt-352f0c7c-750a-404c-84dd-9ce8da01c668"
> name="/run/shm/lttng-ust-wait-5" pid=112038 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:58 qrof5-pod00-b17-kl02-comp01 kernel: [1126098.793445]
> type=1400 audit(1434075118.233:1833185): apparmor="DENIED" operation="open"
> profile="libvirt-0ae00bf3-6189-4716-a5f3-5c7e17d8d6ef"
> name="/run/shm/lttng-ust-wait-5" pid=181240 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:58 qrof5-pod00-b17-kl02-comp01 kernel: [1126098.858651]
> type=1400 audit(1434075118.301:1833186): apparmor="DENIED" operation="open"
> profile="libvirt-46824e01-85cd-4197-95e6-9d5ecd50b6a7"
> name="/run/shm/lttng-ust-wait-5" pid=148554 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:11:59 qrof5-pod00-b17-kl02-comp01 kernel: [1126099.732977]
> type=1400 audit(1434075119.173:1833187): apparmor="DENIED" operation="open"
> profile="libvirt-6c3df627-ee93-42ea-85b3-3ee59bf2aa10"
> name="/run/shm/lttng-ust-wait-5" pid=116281 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:12:00 qrof5-pod00-b17-kl02-comp01 kernel: [1126101.319423]
> type=1400 audit(1434075120.757:1833188): apparmor="DENIED" operation="open"
> profile="libvirt-6919fc0b-f6c7-4a66-bfc3-d9df1bc8df10"
> name="/run/shm/lttng-ust-wait-5" pid=44353 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:12:00 qrof5-pod00-b17-kl02-comp01 kernel: [1126101.322683]
> type=1400 audit(1434075120.761:1833189): apparmor="DENIED" operation="open"
> profile="libvirt-07fcebce-49cb-4b6e-9947-63fc50911107"
> name="/run/shm/lttng-ust-wait-5" pid=40722 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:12:00 qrof5-pod00-b17-kl02-comp01 kernel: [1126101.322687]
> type=1400 audit(1434075120.761:1833190): apparmor="DENIED" operation="open"
> profile="libvirt-c7bb9447-d71f-4c0e-8b9b-5fb4ebad0c98"
> name="/run/shm/lttng-ust-wait-5" pid=141561 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:12:01 qrof5-pod00-b17-kl02-comp01 kernel: [1126102.062532]
> type=1400 audit(1434075121.501:1833191): apparmor="DENIED" operation="open"
> profile="libvirt-b65c3a6a-97d5-4d58-9e63-9559c9cd9844"
> name="/run/shm/lttng-ust-wait-5" pid=158420 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:12:01 qrof5-pod00-b17-kl02-comp01 kernel: [1126102.337354]
> type=1400 audit(1434075121.773:1833192): apparmor="DENIED" operation="open"
> profile="libvirt-23e538ca-f866-46b4-842d-e356f539fc0f"
> name="/run/shm/lttng-ust-wait-5" pid=126869 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
> Jun 11 21:12:01 qrof5-pod00-b17-kl02-comp01 kernel: [1126102.341453]
> type=1400 audit(1434075121.777:1833193): apparmor="DENIED" operation="open"
> profile="libvirt-30a04ffe-ae41-4bd4-8970-30f3558fddfc"
> name="/run/shm/lttng-ust-wait-5" pid=39218 comm="qemu-system-x86"
> requested_mask="r" denied_mask="r" fsuid=107 ouid=0
>
> And this is the libvirt.log
>
> 2015-06-12 01:15:32.725+0000: 242467: info : libvirt version: 1.2.2
> 2015-06-12 01:15:32.725+0000: 242467: error : qemuMonitorOpenUnix:306 :
> failed to connect to monitor socket: No such process
> 2015-06-12 01:15:33.013+0000: 242467: error : virCommandWait:2399 : internal
> error: Child process (/usr/lib/libvirt/virt-aa-helper -R -u
> libvirt-34e1062b-5aa7-495c-8171-dc48cb489204) unexpected exit status 1:
> virt-aa-helper: error: apparmor_parser exited with error
>
> 2015-06-12 01:15:33.013+0000: 242467: error :
> AppArmorRestoreSecurityAllLabel:560 : internal error: could not remove
> profile for 'libvirt-34e1062b-5aa7-495c-8171-dc48cb489204'
> 2015-06-12 01:20:46.703+0000: 243929: info : libvirt version: 1.2.2
> 2015-06-12 01:20:46.703+0000: 243929: error : qemuMonitorOpenUnix:306 :
> failed to connect to monitor socket: No such process
> 2015-06-12 01:20:46.989+0000: 243929: error : virCommandWait:2399 : internal
> error: Child process (/usr/lib/libvirt/virt-aa-helper -R -u
> libvirt-34e1062b-5aa7-495c-8171-dc48cb489204) unexpected exit status 1:
> virt-aa-helper: error: apparmor_parser exited with error
>
> 2015-06-12 01:20:46.990+0000: 243929: error :
> AppArmorRestoreSecurityAllLabel:560 : internal error: could not remove
> profile for 'libvirt-34e1062b-5aa7-495c-8171-dc48cb489204'
>
> Can anybody give me some guidance about this?
> Thanks
>
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>



-- 
Rackspace Australia




More information about the Openstack mailing list