Hi,
i was able to solve our problem. The neutron-plugin-vpn-agent inherits
from the l3-agent !? Maybe this service also cosumes messages from the
l3-agent-queues.
l3_agentrabbit@ctl1.3.600.0 1 true
l3_agentrabbit@ctl1.3.13923.0 1 true
l3_agent.netnode1
** Project changed: neutron = neutron (Ubuntu)
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to neutron in Ubuntu.
https://bugs.launchpad.net/bugs/1288841
Title:
l3-agent (dis)associate floatingip only after restart
To manage
I tried to repeatedly reproduce the error. I removed the rw-permission
from abstractions/libvirt-qemu, reloaded the apparmor-profiles. I start
an new intstance an try to get an snapshot.
I have added some debug-output to the soruce code of /usr/lib/python2.7
Another logentry points to the dynamic-profiles
[868559.234898] type=1400 audit(1384528406.841:246): apparmor=DENIED
operation=open parent=1 profile=libvirt-
7aa8a408-8ca0-46b3-8ab8-e89b334082d2
name=/var/lib/nova/instances/snapshots/tmpflKt2v/9f52ec7cb15d458488df1a1efad52d9c.delta
pid=7957
Hello, we have the same problem. I found logentries in syslog.
for example:
kernel: [866752.543340] type=1400 audit(1384526598.408:216):
apparmor=DENIED operation=open parent=28895
profile=/usr/lib/libvirt/virt-aa-helper
I set the dynamic profile
aa-complain libvirt-7aa8a408-8ca0-46b3-8ab8-e89b334082d2
and shut-off and start the instance. After that i get an snapshot
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
I added the following line to abstractions/libvirt-qemu:
/var/lib/nova/instances/snapshots/*/*.delta rw,
This is not very secure but at the moment it work. Keep in mind, i have
to restart the kvm-process to apply the new/reloaded profile.
--
You received this bug notification because you are a
Ok. I can reproduce the problem. If i enforce the profile and restart
the machine. The snapshot fails. The profile seems to be ok:
Before snapshot:
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
/var/log/libvirt/**/instance-001e.log w,
