[Bug 2091357] [NEW] [SRU] virt-aa-helper: allow riscv64 EDK II

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Heinrich Schuchardt (xypron):

[ Impact ]

Apport does not allow libvirt to use EDK II provided by package qemu-
efi-riscv64 installed in the default path.

Upstream has accepted a patch for the virt-aa-helper:
https://gitlab.com/libvirt/libvirt/-/commit/c63bdd17b9f5c31a2511f173d60455b83d22c561

[ Test Plan ]

Install libvirt-clients libvirt-daemon libvirt-daemon-system.

Create a libvirt instance with 'virsh define my.xml' where my.xml has
the following content:

<?xml version="1.0"?>
<domain type="qemu">
  <uuid>1a35d812-d84c-42c3-a21d-6c67a6c5db06</uuid>
  <name>ubuntu24.04-riscv64</name>
  <os>
    <type arch='riscv64' machine='virt'>hvm</type>
    <loader readonly='yes' type='pflash'>/usr/share/qemu-efi-riscv64/RISCV_VIRT_CODE.fd</loader>
    <nvram type='file' template='/usr/share/qemu-efi-riscv64/RISCV_VIRT_VARS.fd'>
              <source file='/home/ubuntu/RISCV_VIRT_VARS.fd'/>
  </nvram>
    <boot dev='hd'/>
  </os>
  <memory unit="MiB">512</memory>
  <vcpu placement="static">2</vcpu>
  <cpu match='exact'>
    <model>rv64</model>
    <topology sockets='1' cores='2' threads='1' />
  </cpu>
  <devices>
    <emulator>usr/bin/qemu-system-riscv64</emulator>
    <rng model='virtio'>
      <backend model='builtin'/>
    </rng>
    <console type="pty">
      <target type="serial" port="0"/>
    </console>
  </devices>
</domain>

It should be possible to launch the VM but the following is observed

$ virsh start ubuntu24.04-riscv64 && virsh console ubuntu24.04-riscv64 --safe
error: Failed to start domain 'ubuntu24.04-riscv64'
error: internal error: cannot load AppArmor profile 'libvirt-1a35d812-d84c-42c3-a21d-6c67a6c5db06'

User libvirt-qemu needs access (R+X) to the directory with the copy of
/usr/share/qemu-efi-riscv64/RISCV_VIRT_CODE.fd.

[ Where problems could occur ]

Launching the RISC-V virtual machine with EDK II might still fail.

[ Other Info ]

Merge request in Debian:
https://salsa.debian.org/libvirt-team/libvirt/-/merge_requests/246

** Affects: libvirt (Ubuntu)
     Importance: Undecided
     Assignee: Sergio Durigan Junior (sergiodj)
         Status: Fix Released

** Affects: libvirt (Ubuntu Noble)
     Importance: Undecided
         Status: New

** Affects: libvirt (Ubuntu Oracular)
     Importance: Undecided
         Status: New

** Affects: libvirt (Ubuntu Plucky)
     Importance: Undecided
     Assignee: Sergio Durigan Junior (sergiodj)
         Status: Fix Released

-- 
[SRU] virt-aa-helper: allow riscv64 EDK II
https://bugs.launchpad.net/bugs/2091357
You received this bug notification because you are a member of Ubuntu Sponsors, which is subscribed to the bug report.