https://bugzilla.suse.com/show_bug.cgi?id=1226105 Bug ID: 1226105 Summary: Snapshot 20240606 breaks libvirt NAT networks Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs@suse.de Reporter: eyadlorenzo@gmail.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- Found after updating and trying to use a VM. The VM is connected to the NAT network but it can't connect to the external net. It does not happen on 20240605. I suspect it's apparmor fault. On the new snapshot (which, by the way, had apparmor profiles updates) I get these error on the journal: --- mag 28 22:12:57 xxx virtqemud[15293]: Failed to open file '/sys/kernel/security/apparmor/profiles': Permission denied mag 28 22:12:57 xxx virtqemud[15293]: Failed to read AppArmor profiles list '/sys/kernel/security/apparmor/profiles': Permission denied mag 28 22:12:57 xxx virtqemud[15293]: Failed to open file '/sys/kernel/security/apparmor/profiles': Permission denied mag 28 22:12:57 xxx virtqemud[15293]: Failed to read AppArmor profiles list '/sys/kernel/security/apparmor/profiles': Permission denied --- While I don't get them on the 20240605 snapshot. I rolled back and it works again. On the old snapshot, running zypper dup I get: --- The following 111 packages are going to be upgraded: apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang chrony chrony-pool-openSUSE corepack21 crun dialog dialog-lang fakeroot gnome-control-center gnome-control-center-color gnome-control-center-goa gnome-control-center-lang gnome-control-center-user-faces gnome-control-center-users gnome-shell-search-provider-seahorse go1.21-doc go1.21-libstd hugo hugo-bash-completion just just-bash-completion just-fish-completion libapparmor-devel libapparmor1 libbpf1 libcjson1 libdialog15 libfreerdp2-2 libkrun1 libndctl6 libsamba-policy0-python3 libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 libsvn_auth_gnome_keyring-1-0 libtelepathy-glib0 libtommath1 libtommath1-x86-64-v3 libvirt libvirt-client libvirt-client-qemu libvirt-daemon libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-proxy libvirt-daemon-qemu libvirt-libs libwinpr2-2 man nodejs21 nodejs21-devel npm21 openSUSE-release openSUSE-release-appliance-custom patterns-base-apparmor patterns-base-base patterns-base-basesystem patterns-base-basic_desktop patterns-base-documentation patterns-base-enhanced_base patterns-base-minimal_base patterns-base-sw_management patterns-base-x11 patterns-base-x11_enhanced podman python3-apparmor python311-jaraco.functools python311-libvirt-python python311-platformdirs ruby3.3-rubygem-ruby-augeas samba samba-ad-dc-libs samba-client samba-client-libs samba-libs samba-libs-python3 samba-python3 seahorse seahorse-lang subversion subversion-bash-completion subversion-perl typelib-1_0-TelepathyGlib-0_12 xen-libs xwayland The following 10 patterns are going to be upgraded: apparmor base basesystem basic_desktop documentation enhanced_base minimal_base sw_management x11 x11_enhanced The following product is going to be upgraded: openSUSE Tumbleweed 20240605-0 -> 20240606-0 The following NEW package is going to be installed: libkrunfw4 The following package is going to be REMOVED: libkrunfw3 --- Let me know if you need any more details. -- You are receiving this mail because: You are on the CC list for the bug.