[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-11 Thread Serge Hallyn 
This is fixed in 1.3.1-1ubuntu7

** Package changed: qemu (Ubuntu) => libvirt (Ubuntu)

** Changed in: libvirt (Ubuntu)
   Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-11 Thread Jignasha 
This is virt-manager or libvirt package
Where is that package in your ppa

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-10 Thread Serge Hallyn 
I have a test package building in ppa:serge-hallyn/virt.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-10 Thread Jignasha 
so what we can do in code before blockcommit to change rw

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-10 Thread Serge Hallyn 
ok, actually I think this is simply an error in virt-aa-helper.
apparmor's load_profile() should be being called before the blockcommit
begins, to add rw access to the base image.  Which is why the rw rule is
there.  But the 'deny' rule is for some reason still there.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-10 Thread Jignasha 
So what would be best way to fix this issue
As of now we fixes this by setting security_driver = "none"
But this is worst fix 
what can be done to fix this bug rightway

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-10 Thread Serge Hallyn 
strace shows:

5082
open("/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZDpzZXJ2ZXI6MTYuMDQ6YW1kNjQgMjAxNjAxMjU=",
O_RDWR|O_CLOEXEC) = -1 EACCES (Permission denied)

The apparmor profile (libvirt-uuid.files) includes:

  
"/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZDpzZXJ2ZXI6MTYuMDQ6YW1kNjQgMjAxNjAxMjU="
 r,
  # don't audit writes to readonly files
  deny 
"/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZDpzZXJ2ZXI6MTYuMDQ6YW1kNjQgMjAxNjAxMjU="
 w,
  "/var/lib/uvtool/libvirt/images/docker-ds.qcow" rw,
  /dev/vhost-net rw,
  
"/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZDpzZXJ2ZXI6MTYuMDQ6YW1kNjQgMjAxNjAxMjU="
 rw,

That long filename is the (readonly) backing file for the root disk.

sudo qemu-img info docker.qcow
image: docker.qcow
file format: qcow2
virtual size: 30G (32212254720 bytes)
disk size: 7.0G
cluster_size: 65536
backing file: 
/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZDpzZXJ2ZXI6MTYuMDQ6YW1kNjQgMjAxNjAxMjU=
backing file format: qcow2
Format specific information:
compat: 0.10
refcount bits: 16

So it would seem we could consider this (a) a bug in qemu for requiring
write access to a readonly backing file, or (b) a bug in libvirt for
denying that write access.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-10 Thread Serge Hallyn 
So the error message itself comes from qemu, in block/raw-posix.c:

error_setg_errno(errp, errno, "Could not reopen file")

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-09 Thread Serge Hallyn 
** Changed in: qemu (Ubuntu)
   Importance: Undecided => High

** Changed in: qemu (Ubuntu)
   Status: New => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-09 Thread Serge Hallyn 
** Changed in: qemu (Ubuntu)
   Status: Invalid => New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-08 Thread Jignasha 
We have updated libvirt version from support release version

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-08 Thread Jignasha 
With support release version also getting same error

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-07 Thread Jignasha 
PFB outputs

$ cat /etc/*-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04
DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION="Ubuntu 14.04.4 LTS"
NAME="Ubuntu"
VERSION="14.04.4 LTS, Trusty Tahr"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 14.04.4 LTS"
VERSION_ID="14.04"
HOME_URL="http://www.ubuntu.com/";
SUPPORT_URL="http://help.ubuntu.com/";
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/";

$ ls -l /etc/apt/sources.list.d
total 4
-rw-r--r-- 1 root root 78 Feb 23 05:51 cloudarchive-kilo.list

$ cat /etc/apt/sources.list.d/*
deb http://ubuntu-cloud.archive.canonical.com/ubuntu trusty-updates/kilo main

$ dpkg -l | egrep -e '(libvirt|qemu)'
ii  ipxe-qemu   1.0.0+git-2013.c3d1e78-2ubuntu1.1 
all  PXE boot firmware - ROM images for qemu
ii  libvirt-bin 1.2.12-0ubuntu14.2~cloud0 
amd64programs for the libvirt library
ii  libvirt01.2.12-0ubuntu14.2~cloud0 
amd64library for interfacing with different virtualization systems
ii  nova-compute-libvirt1:2015.1.2-0ubuntu2~cloud0
all  OpenStack Compute - compute node libvirt support
ii  python-libvirt  1.2.2-0ubuntu2
amd64libvirt Python bindings
ii  qemu1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64fast processor emulator
ii  qemu-slof   20140630+dfsg-1ubuntu1~14.04  
all  Slimline Open Firmware -- QEMU PowerPC version
ii  qemu-system 1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries
ii  qemu-system-arm 1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (arm)
ii  qemu-system-common  1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (common files)
ii  qemu-system-mips1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (mips)
ii  qemu-system-misc1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (miscelaneous)
ii  qemu-system-ppc 1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (ppc)
ii  qemu-system-sparc   1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (sparc)
ii  qemu-system-x86 1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU full system emulation binaries (x86)
ii  qemu-user   1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU user mode emulation binaries
ii  qemu-user-binfmt1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU user mode binfmt registration for qemu-user
ii  qemu-utils  1:2.2+dfsg-5expubuntu9.6~cloud0   
amd64QEMU utilities


Getting below DENIED stat in syslog

Mar  7 07:41:19 ubuntu-kilo kernel: [604860.586630] audit: type=1400 
audit(1457354479.040:171): apparmor="DENIED" operation="open" 
profile="libvirt-4aba5887-882f-494f-ae4b-26e2bdc8a25a" 
name="/sys/devices/system/node/" pid=22024 comm="qemu-system-x86" 
requested_mask="r" denied_mask="r" fsuid=106 ouid=0
Mar  7 07:41:19 ubuntu-kilo kernel: [604860.586652] audit: type=1400 
audit(1457354479.040:172): apparmor="DENIED" operation="open" 
profile="libvirt-4aba5887-882f-494f-ae4b-26e2bdc8a25a" 
name="/sys/devices/system/cpu/" pid=22024 comm="qemu-system-x86" 
requested_mask="r" denied_mask="r" fsuid=106 ouid=0

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-07 Thread Serge Hallyn 
The default security driver in Ubuntu is apparmor.

Could you please show the output of

cat /etc/*-release
ls -l /etc/apt/sources.list.d
cat /etc/apt/sources.list.d/*
dpkg -l | egrep -e '(libvirt|qemu)'

and show any relevant DENIED messages in syslog (grep DENIED
/var/log/syslog)

Your libvirt version, 1.2.12, is not in any support release of Ubuntu.

** Changed in: qemu (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1554031] Re: error: internal error: unable to execute QEMU command ‘block-commit’: Could not reopen file: Permission denied

2016-03-07 Thread Jignasha 
** Description changed:

  $ uname -a
  Linux ubuntu-kilo 3.19.0-51-generic #57~14.04.1-Ubuntu SMP Fri Feb 19 
14:36:55 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
  
  $ visrh version
  Compiled against library: libvirt 1.2.12
  Using library: libvirt 1.2.12
  Using API: QEMU 1.2.12
  Running hypervisor: QEMU 2.2.0
  
- $visrh blockcomit 
+ $ virsh blockcommit {{ vm_id }} vda --active --pivot --verbose
  unable to execute QEMU command ‘block-commit’: Could not reopen file: 
Permission denied
  
- blockcommit has above error 
- what is default security_driver used by qemu on ubuntu 
+ blockcommit has above error
+ what is default security_driver used by qemu on ubuntu
  & how we can configure rules to solve in right way

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu in Ubuntu.
https://bugs.launchpad.net/bugs/1554031

Title:
  error: internal error: unable to execute QEMU command ‘block-commit’:
  Could not reopen file: Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1554031/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs