Bug ID | 1125665 |
---|---|
Summary | libvirt regression: can't start domains in qemu:///session -- prctl failed to enable 'dac_override' in the AMBIENT set |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | openSUSE Factory |
Status | NEW |
Severity | Major |
Priority | P5 - None |
Component | Virtualization:Other |
Assignee | virt-bugs@suse.de |
Reporter | javispedro@gmail.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0 Build Identifier: This is regression in the current version of the libvirt package. The following patch was pulled from upstream in the package about 8 days ago: a2d3dea9-qemu-caps-dac-override-sev.patch This patch makes libvirt ask for the 'dac_override' capability during domain startup. This capability will NOT be granted to a non-root qemu, so libvirt aborts. I have manually verified that removing this patch from libvirt package fixes the issue and I can start my qemu:///session domains normally. My impression is that this capability should only be asked if getuid == 0. Reproducible: Always Steps to Reproduce: 1. Create a "qemu user session" libvirt VM using any of the available tools (GNOME Boxes, virt-manager, etc.) 2. Start that VM either from the GUI or through 'virsh -c qemu:///session start $VM' Actual Results: libvirt: Error : prctl failed to enable 'dac_override' in the AMBIENT set: Operation not permitted I am not sure whether I should report this bug upstream too, as I'm not sure the issue happens on other distros. Tumbleweed is the only one I have whether this patch is currently merged.