Hello,
thank you for the patch above, I'm trying to run on Debian testing the
following coomand:
virt-customize -v --root-password password:f -a
resolute-server-cloudimg-amd64v3.img
patching the policy helped with the following error:
kernel: audit: type=1400 audit(1792010054.510:171): apparmor="DENIED"
operation="open" class="file" info="Failed name lookup - disconnected
path" error=-13 profile="guestfs-tools//passt" name="" pid=6563
comm="passt.avx2" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
but the policy still denies mknod operation:
kernel: audit: type=1400 audit(1792011995.296:492): apparmor="DENIED"
operation="mknod" class="file" profile="passt"
name="/run/user/1000/libguestfsewiR6y/passt.sock" pid=10413
comm="passt.avx2" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
for the following commands virt-customize runs:
libguestfs: command: run: passt
libguestfs: command: run: \ --one-off
libguestfs: command: run: \ --socket
/run/user/1000/libguestfsewiR6y/passt.sock
libguestfs: command: run: \ --pid /run/user/1000/libguestfsewiR6y/passt2.pid
libguestfs: command: run: \ --address 169.254.2.15
libguestfs: command: run: \ --netmask 16
libguestfs: command: run: \ --mac-addr 52:56:00:00:00:02
libguestfs: command: run: \ --gateway 169.254.2.2
No interfaces with usable IPv6 routes
IPv6: no external interface as template, use local mode
Failed to bind UNIX domain socket: Permission denied
Best Regards
Ivan Stana
