[Bug 1927519] Re: Mitigate libvirt: error : unable to set AppArmor profile 'libvirt-<vm-uuid>' for '/usr/bin/kvm-spice': No such file or directory

[Christian Ehrhardt ]

In jammy it seems this won't stop - I have finally unblocked glusterfs
which blocked this (also the second glusterfs issue), but now it is
entangled in the liburcu transition and that might be enough to get it
into openssl3 then. But I've tested this from -proposed and there it is
fine no matter if it is one or four weeks until it finally migrates.

For the SRU that is enough to get started, so let me prepare this now...

** Changed in: libvirt (Ubuntu Jammy)
       Status: In Progress => Fix Committed

** Changed in: libvirt (Ubuntu Impish)
       Status: Confirmed => In Progress

** Changed in: libvirt (Ubuntu Impish)
     Assignee: (unassigned) => Christian Ehrhardt  (paelzer)

** Changed in: libvirt (Ubuntu Hirsute)
       Status: Confirmed => In Progress

** Changed in: libvirt (Ubuntu Hirsute)
     Assignee: (unassigned) => Christian Ehrhardt  (paelzer)

** Changed in: libvirt (Ubuntu Focal)
       Status: Confirmed => In Progress

** Changed in: libvirt (Ubuntu Focal)
     Assignee: (unassigned) => Christian Ehrhardt  (paelzer)

** Changed in: libvirt (Ubuntu Bionic)
       Status: Confirmed => In Progress

** Changed in: libvirt (Ubuntu Bionic)
     Assignee: (unassigned) => Christian Ehrhardt  (paelzer)

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1927519

Title:
  Mitigate libvirt: error : unable to set AppArmor profile 'libvirt-<vm-
  uuid>' for '/usr/bin/kvm-spice': No such file or directory

Status in Ubuntu Cloud Archive:
  New
Status in Ubuntu Cloud Archive queens series:
  New
Status in Ubuntu Cloud Archive stein series:
  New
Status in Ubuntu Cloud Archive ussuri series:
  New
Status in libvirt package in Ubuntu:
  Fix Committed
Status in libvirt source package in Bionic:
  In Progress
Status in libvirt source package in Focal:
  In Progress
Status in libvirt source package in Hirsute:
  In Progress
Status in libvirt source package in Impish:
  In Progress
Status in libvirt source package in Jammy:
  Fix Committed

Bug description:
  [Impact]

  Some times libvirt fails to start a vm with the following error : 
  libvirt:  error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory

  This happens because for some reason file
  /etc/apparmor.d/libvirt/libvirt-<vm-uuid> has 0 size.

  Although, we do not now why the above file gets truncated and therefore we do not know the root cause, I open this bug to come up with a way to mitigate the issue.
  E.g. when  libvirt sees that this file is 0-size to delete it and create it again.

  [Test case]

  To reproduce this behaviour, create a vm and stop it, note the uuid.
  Then :

  ## touch /etc/apparmor.d/libvirt/libvirt-<vm-uuid>
  # touch /etc/apparmor.d/libvirt/libvirt-b05b297f-952f-42d6-b04e-f9a13767db54
  # ls -la libvirt-b05b297f-952f-42d6-b04e-f9a13767db54
  -rw-r--r-- 1 root root 0 May  6 18:46 libvirt-b05b297f-952f-42d6-b04e-f9a13767db54

  Try to start the vm, it will fail with :
  libvirt:  error : unable to set AppArmor profile 'libvirt-b05b297f-952f-42d6-b04e-f9a13767db54' for '/usr/bin/kvm-spice': No such file or directory 

  To be able to start the vm again just delete the libvirt-<vm-uuid>
  file.

  [Regression Potential]

  TBD

  [Other]

  Similar reported bug : https://bugs.debian.org/cgi-
  bin/bugreport.cgi?bug=890084

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1927519/+subscriptions