Hi,
wow a lot of info to pass through - thank you for your report!

I really think we need to understand the apparmor DENY.
apparmor="DENIED" operation="setrlimit" profile="/usr/sbin/libvirtd" pid=6853 
comm="libvirtd" rlimit=memlock value=8694792192

#1 Until then you can either use the disable of apparmor that you used:
$ sudo aa-complain /usr/sbin/libvirtd
$ sudo aa-complain /etc/apparmor.d/libvirt/libvirt-<UUID>

#2 Or as Michael oultined for you the libvirt xml change, but to make all three 
here the next workaround would be:
  <memtune>
    <hard_limit unit='KiB'>16961536</hard_limit>
    <soft_limit unit='KiB'>16961536</soft_limit>
  </memtune>
But I'd assume that hits the same apparmor block (I'll check)

#3 Or you can just raise the limit beforehand on the running qemu
# get the qemu pid
$ prlimit --pid <qemu pid> --memlock=unlimited


IIRC /dev/vfio/vfio rw, should be in via cgroup_acl in qemu.conf, but I''ll 
recreate your case and make sure.
Back with more updates somewhen later today.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1678322

Title:
  Ubuntu 17.04 KVM: Can not do hotplug attach

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1678322/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to