Public bug reported:

---Problem Description---
VM fails to start with dac security driver added
---uname output---
Linux ltc-test-ci1 4.4.0-9136-generic #55-Ubuntu SMP Fri Aug 26 05:56:24 UTC 
2016 ppc64le ppc64le ppc64le GNU/Linux
Machine Type = power 8 ppc64le 
---Steps to Reproduce---
VM fails to start with dac security driver added
1. Define a VM with both apparmor and dac security driver( Used XML as below) 
#virsh dumpxml virt-tests-vm1
<domain type='kvm'>
  <memory unit='KiB'>33554432</memory>
  <currentMemory unit='KiB'>33554432</currentMemory>
  <vcpu placement='static'>32</vcpu>
    <type arch='ppc64le' machine='pseries-2.6'>hvm</type>
    <boot dev='hd'/>
    <topology sockets='1' cores='32' threads='1'/>
  <clock offset='utc'/>
    <disk type='file' device='disk'>
      <driver name='qemu' type='qcow2'/>
      <target dev='sda' bus='scsi'/>
      <address type='drive' controller='0' bus='0' target='0' unit='0'/>
    <controller type='usb' index='0'>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' 
    <controller type='pci' index='0' model='pci-root'/>
    <controller type='scsi' index='0'>
      <address type='spapr-vio' reg='0x2000'/>
    <interface type='bridge'>
      <mac address='52:54:00:e2:e3:e4'/>
      <source bridge='virbr0'/>
      <model type='virtio'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x01' 
    <serial type='pty'>
      <target port='0'/>
      <address type='spapr-vio' reg='0x30000000'/>
    <console type='pty'>
      <target type='serial' port='0'/>
      <address type='spapr-vio' reg='0x30000000'/>
    <memballoon model='virtio'>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' 
    <panic model='pseries'/>
  <seclabel type='dynamic' model='apparmor' relabel='yes'/>
  <seclabel type='dynamic' model='dac' relabel='yes'/>

2. virsh start virt-tests-vm1
#virsh start virt-tests-vm1
error: Failed to start domain virt-tests-vm1
error: internal error: cannot load AppArmor profile 

3. After removing dac line from xml(<seclabel type='dynamic' model='dac' 
relabel='yes'/>) VM started fine
#virsh start virt-tests-vm1
Domain virt-tests-vm1 started

Userspace tool common name: ii  libvirt-bin                          
2.1.0-1ubuntu5                      ppc64el      programs for the libvirt 
The userspace tool has the following bit modes: both 

Userspace package: ii  libvirt-bin
2.1.0-1ubuntu5                      ppc64el      programs for the
libvirt library

** Affects: libvirt (Ubuntu)
     Importance: Undecided
     Assignee: Taco Screen team (taco-screen-team)
         Status: New

** Tags: architecture-ppc64le bugnameltc-145787 severity-critical 

** Tags added: architecture-ppc64le bugnameltc-145787 severity-critical

You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

  VM fails to start with dac security driver added

To manage notifications about this bug go to:

ubuntu-bugs mailing list

Reply via email to