Public bug reported:

Our automated tests spotted an issue with the last libvirt upload.

In uvtool the setup is using a qcow with a base device:
So the (generated) aa profiles for the guests used to have an entry like:
  
"/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZC5kYWlseTpzZXJ2ZXI6MTcuMTA6cHBjNjRlbCAyMDE3MDcxMw=="
 r,
  
This is the base device referenced "from" the qcow device owned by the guest.

This rule is missing and thereby causing an issue like:
uvt-kvm create --template /root/guesttemplate.xml --password=ubuntu 
--ssh-public-key-file /home/ubuntu/.ssh/authorized_keys kvmguest-artful-normal 
release=artful arch=ppc64el label=daily
Warning: using --password from the command line is not secure and should be 
used for debugging only.
Warning: '/home/ubuntu/.ssh/authorized_keys' not found; instance will be 
started with no ssh access by default.
uvt-kvm: error: libvirt: internal error: process exited while connecting to 
monitor: 2017-07-17T12:00:43.068460Z qemu-system-ppc64: -drive 
file=/var/lib/uvtool/libvirt/images/kvmguest-artful-normal.qcow,format=qcow2,if=none,id=drive-virtio-disk0:
 Could not open backing file: Could not open 
'/var/lib/uvtool/libvirt/images/x-uvt-b64-Y29tLnVidW50dS5jbG91ZC5kYWlseTpzZXJ2ZXI6MTcuMTA6cHBjNjRlbCAyMDE3MDcxMw==':
 Permission denied

** Affects: libvirt (Ubuntu)
     Importance: Undecided
     Assignee: ChristianEhrhardt (paelzer)
         Status: Triaged

** Changed in: libvirt (Ubuntu)
       Status: New => Triaged

** Changed in: libvirt (Ubuntu)
     Assignee: (unassigned) => ChristianEhrhardt (paelzer)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1704782

Title:
  qcow base image apparmor rule missing in artful

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1704782/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to