Control: reassign -1 apparmor 3.0.4-2 Control: found -1 apparmor 2.13.6-10 Thanks for the report!
I cleaned up the reproducer a bit: Drop the line breaks, automate the firmware='efi' bit, and create the missing novell.iso; it just needs to exist, it does not have to have any actual content for this reproducer. I also reassign it to AppArmor. I believe virt-install/libvirt is within its rights here, and the AA profile needs to be fixed. This also affects Debian 11, so adding the affects. virt-install --connect qemu:///system --quiet --os-variant fedora28 --memory 128 --name test --wait -1 --disk size=0.125,format=qcow2 --graphics vnc,listen=127.0.0.1 --graphics spice,listen=127.0.0.1 --print-xml 1 | sed "s/<os/& firmware='efi'/" > /tmp/test1.xml virsh define /tmp/test1.xml touch /var/lib/libvirt/novell.iso virt-install --connect qemu:///system --reinstall test --wait -1 --noautoconsole --cdrom /var/lib/libvirt/novell.iso --autostart This is now a copy&paste reproducer that works on a clean debian testing cloud image, with virt-install and apparmor installed. Thanks, Martin
