Your message dated Mon, 10 Sep 2018 07:49:38 +0000
with message-id <e1fzgx0-000j2v...@fasolo.debian.org>
and subject line Bug#908341: fixed in libvirt 4.7.0-1
has caused the Debian Bug report #908341,
regarding VMs fail to start with "Kernel does not provide mount namespace:
Permission denied"
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
908341: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=908341
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libvirt-daemon-system
Version: 4.6.0-2
Severity: grave
Hi,
with the kernel update to 4.18, I'm no longer able to start any VMs via
libvirt/virt-manager. I get the following error:
Error starting domain: internal error: child reported: Kernel does not provide
mount namespace: Permission denied
Traceback (most recent call last):
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 89, in cb_wrapper
callback(asyncjob, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 125, in tmpcb
callback(*args, **kwargs)
File "/usr/share/virt-manager/virtManager/libvirtobject.py", line 82, in newfn
ret = fn(self, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/domain.py", line 1508, in startup
self._backend.create()
File "/usr/lib/python2.7/dist-packages/libvirt.py", line 1080, in create
if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
libvirtError: internal error: child reported: Kernel does not provide mount
namespace: Permission denied
If I disable AppArmor, I can successfully start the VMs.
Since AppArmor is enabled by default, I think the RC severity is
justified.
I've CCed the AppArmor maintainers, as I'm not sure if this is a bug in
this package or apparmor. Please reassign if necessary.
Regards,
Michael
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.18.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libvirt-daemon-system depends on:
ii adduser 3.117
ii debconf [debconf-2.0] 1.5.69
ii firewalld 0.6.1-2
ii gettext-base 0.19.8.1-7
ii iptables 1.6.2-1.1
ii libacl1 2.2.52-3+b1
ii libapparmor1 2.13-8
ii libaudit1 1:2.8.4-2
ii libblkid1 2.32.1-0.1
ii libc6 2.27-6
ii libcap-ng0 0.7.9-1
ii libdbus-1-3 1.12.10-1
ii libdevmapper1.02.1 2:1.02.145-4.1
ii libgnutls30 3.5.19-1
ii libnl-3-200 3.4.0-1
ii libnl-route-3-200 3.4.0-1
ii libnuma1 2.0.12-1
ii libselinux1 2.8-1+b1
ii libvirt-clients 4.6.0-2
ii libvirt-daemon 4.6.0-2
ii libvirt0 4.6.0-2
ii libxml2 2.9.4+dfsg1-7+b1
ii libyajl2 2.1.0-2+b3
ii logrotate 3.14.0-4
ii lsb-base 9.20170808
ii policykit-1 0.105-21
Versions of packages libvirt-daemon-system recommends:
ii bridge-utils 1.5-16
ii dmidecode 3.1-2
ii dnsmasq-base [dnsmasq-base] 2.79-1
ii ebtables 2.0.10.4-5
ii iproute2 4.18.0-2
ii parted 3.2-21+b1
Versions of packages libvirt-daemon-system suggests:
ii apparmor 2.13-8
pn auditd <none>
ii nfs-common 1:1.3.4-2.2
pn open-iscsi <none>
pn pm-utils <none>
pn radvd <none>
ii systemd 239-8
pn systemtap <none>
pn zfsutils <none>
-- Configuration Files:
/etc/libvirt/nwfilter/allow-arp.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/allow-arp.xml'
/etc/libvirt/nwfilter/allow-dhcp-server.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/allow-dhcp-server.xml'
/etc/libvirt/nwfilter/allow-dhcp.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/allow-dhcp.xml'
/etc/libvirt/nwfilter/allow-incoming-ipv4.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/allow-incoming-ipv4.xml'
/etc/libvirt/nwfilter/allow-ipv4.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/allow-ipv4.xml'
/etc/libvirt/nwfilter/clean-traffic-gateway.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/clean-traffic-gateway.xml'
/etc/libvirt/nwfilter/clean-traffic.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/clean-traffic.xml'
/etc/libvirt/nwfilter/no-arp-ip-spoofing.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-arp-ip-spoofing.xml'
/etc/libvirt/nwfilter/no-arp-mac-spoofing.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-arp-mac-spoofing.xml'
/etc/libvirt/nwfilter/no-arp-spoofing.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-arp-spoofing.xml'
/etc/libvirt/nwfilter/no-ip-multicast.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-ip-multicast.xml'
/etc/libvirt/nwfilter/no-ip-spoofing.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-ip-spoofing.xml'
/etc/libvirt/nwfilter/no-mac-broadcast.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-mac-broadcast.xml'
/etc/libvirt/nwfilter/no-mac-spoofing.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-mac-spoofing.xml'
/etc/libvirt/nwfilter/no-other-l2-traffic.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-other-l2-traffic.xml'
/etc/libvirt/nwfilter/no-other-rarp-traffic.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/no-other-rarp-traffic.xml'
/etc/libvirt/nwfilter/qemu-announce-self-rarp.xml [Errno 13] Keine
Berechtigung: '/etc/libvirt/nwfilter/qemu-announce-self-rarp.xml'
/etc/libvirt/nwfilter/qemu-announce-self.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/nwfilter/qemu-announce-self.xml'
/etc/libvirt/qemu.conf [Errno 13] Keine Berechtigung: '/etc/libvirt/qemu.conf'
/etc/libvirt/qemu/networks/default.xml [Errno 13] Keine Berechtigung:
'/etc/libvirt/qemu/networks/default.xml'
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: libvirt
Source-Version: 4.7.0-1
We believe that the bug you reported is fixed in the latest version of
libvirt, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 908...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guido Günther <a...@sigxcpu.org> (supplier of updated libvirt package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 09 Sep 2018 21:42:33 +0200
Source: libvirt
Binary: libvirt-clients libvirt-daemon libvirt-daemon-driver-storage-gluster
libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-sheepdog
libvirt-daemon-driver-storage-zfs libvirt-daemon-system libvirt0 libvirt-doc
libvirt-dev libvirt-sanlock libnss-libvirt libvirt-wireshark
Architecture: source
Version: 4.7.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Libvirt Maintainers
<pkg-libvirt-maintain...@lists.alioth.debian.org>
Changed-By: Guido Günther <a...@sigxcpu.org>
Description:
libnss-libvirt - nss plugin providing IP address resolution for virtual
machines
libvirt-clients - Programs for the libvirt library
libvirt-daemon - Virtualization daemon
libvirt-daemon-driver-storage-gluster - Virtualization daemon glusterfs
storage driver
libvirt-daemon-driver-storage-rbd - Virtualization daemon RBD storage driver
libvirt-daemon-driver-storage-sheepdog - Virtualization daemon Sheedog storage
driver
libvirt-daemon-driver-storage-zfs - Virtualization daemon ZFS storage driver
libvirt-daemon-system - Libvirt daemon configuration files
libvirt-dev - development files for the libvirt library
libvirt-doc - documentation for the libvirt library
libvirt-sanlock - Sanlock plugin for virtlockd
libvirt-wireshark - Wireshark dissector for the libvirt protocol
libvirt0 - library for interfacing with different virtualization systems
Closes: 908341
Changes:
libvirt (4.7.0-1) unstable; urgency=medium
.
* [8ff38ac] New upstream version 4.7.0
(Closes: #908341)
* [afdd147] Bump symbol versions
* [41fa8f5] Rediff patches.
Drop all jansson related patches. Fixed ustream.
Checksums-Sha1:
54188e65ffe237a0e52e93a24ebc9bcfab2c7fe7 4516 libvirt_4.7.0-1.dsc
57d116782f5b6ef3371d6bb29c06df019fe9ec57 14813352 libvirt_4.7.0.orig.tar.xz
e480e57654bcc4205c86d45b30ebb98c381b9f71 67348 libvirt_4.7.0-1.debian.tar.xz
cbe40018d9523d7f134ed49ee1321905304dd7d1 20333 libvirt_4.7.0-1_amd64.buildinfo
Checksums-Sha256:
06bf8c8e89a4675ab2cc95ff12c5d7ef46c26b91c506100de3ce5855deb0d0a1 4516
libvirt_4.7.0-1.dsc
92c279f7321624ac5a37a81f8bbe8c8d2a16781da04c63c99c92d3de035767e4 14813352
libvirt_4.7.0.orig.tar.xz
3aa0f937b21b88e16ae7cb6aa40572e719f3aed8255001fb55ab849a623819d5 67348
libvirt_4.7.0-1.debian.tar.xz
b322d805394fde118bc1f33c882785ecd964bda010470d7f491652d023912197 20333
libvirt_4.7.0-1_amd64.buildinfo
Files:
eef5aa7e756f539de3ae6915ff915118 4516 libs optional libvirt_4.7.0-1.dsc
38da6c33250dcbc0a6d68de5c758262b 14813352 libs optional
libvirt_4.7.0.orig.tar.xz
d4e7bc548c73c69cdd251fa929749516 67348 libs optional
libvirt_4.7.0-1.debian.tar.xz
3aa3e164a33c1782fddb63b9bf5e6f1e 20333 libs optional
libvirt_4.7.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=t4Dc
-----END PGP SIGNATURE-----
--- End Message ---
