Reproducing this with LXD. Launching a VM from the latest questing image
available (20250903): lxc launch ubuntu-daily:25.10 --vm

The relevant package versions:

Package: linux-virtual
Version: 6.17.0-4.4

Package: systemd
Version: 257.9-0ubuntu1

Package: apparmor
Version: 5.0.0~alpha1-0ubuntu6

We see the following denied logs:
journalctl --no-pager | grep DENIED
Sep 18 13:57:12 excited-lion kernel: audit: type=1400 
audit(1758203832.865:196): apparmor="DENIED" operation="capable" class="cap" 
profile="systemd-detect-virt" pid=973 comm="systemd-detect-" capability=12  
capname="net_admin"
Sep 18 13:57:12 excited-lion kernel: audit: type=1400 
audit(1758203832.868:197): apparmor="DENIED" operation="sendmsg" class="file" 
info="Failed name lookup - disconnected path" error=-13 
profile="systemd-detect-virt" name="run/systemd/journal/socket" pid=973 
comm="systemd-detect-" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Sep 18 13:57:12 excited-lion kernel: audit: type=1400 
audit(1758203832.868:198): apparmor="DENIED" operation="capable" class="cap" 
profile="systemd-detect-virt" pid=973 comm="systemd-detect-" capability=38  
capname="perfmon"
Sep 18 13:57:12 excited-lion kernel: audit: type=1400 
audit(1758203832.868:199): apparmor="DENIED" operation="getattr" class="file" 
info="Failed name lookup - disconnected path" error=-13 
profile="systemd-detect-virt" name="" pid=973 comm="systemd-detect-" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Sep 18 13:57:12 excited-lion kernel: audit: type=1400 
audit(1758203832.868:200): apparmor="DENIED" operation="getattr" class="file" 
info="Failed name lookup - disconnected path" error=-13 
profile="systemd-detect-virt" name="" pid=973 comm="systemd-detect-" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Sep 18 13:57:12 excited-lion kernel: audit: type=1400 
audit(1758203832.868:201): apparmor="DENIED" operation="sendmsg" class="file" 
info="Failed name lookup - disconnected path" error=-13 
profile="systemd-detect-virt" name="run/systemd/notify" pid=973 
comm="systemd-detect-" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
Sep 18 13:57:13 excited-lion kernel: audit: type=1400 
audit(1758203833.978:203): apparmor="DENIED" operation="getattr" class="file" 
info="Failed name lookup - disconnected path" error=-13 
profile="systemd-detect-virt" name="" pid=1065 comm="systemd-detect-" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Sep 18 13:57:13 excited-lion kernel: audit: type=1400 
audit(1758203833.978:204): apparmor="DENIED" operation="getattr" class="file" 
info="Failed name lookup - disconnected path" error=-13 
profile="systemd-detect-virt" name="" pid=1065 comm="systemd-detect-" 
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Sep 18 13:57:13 excited-lion kernel: audit: type=1400 
audit(1758203833.978:205): apparmor="DENIED" operation="capable" class="cap" 
profile="systemd-detect-virt" pid=1065 comm="systemd-detect-" capability=12  
capname="net_admin"

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2124958

Title:
  systemd-detect-virt denied perfmon

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2124958/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to