[Bug 1051017] New: virt-manager: Error restoring domain: unsupported configuration: Unable to find security driver for model apparmor
http://bugzilla.suse.com/show_bug.cgi?id=1051017 Bug ID: 1051017 Summary: virt-manager: Error restoring domain: unsupported configuration: Unable to find security driver for model apparmor Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs@suse.de Reporter: holgi@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- When trying to restore a VM that was saved before I do get this error: Error restoring domain: unsupported configuration: Unable to find security driver for model apparmor Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in cb_wrapper callback(asyncjob, *args, **kwargs) File "/usr/share/virt-manager/virtManager/asyncjob.py", line 124, in tmpcb callback(*args, **kwargs) File "/usr/share/virt-manager/virtManager/libvirtobject.py", line 83, in newfn ret = fn(self, *args, **kwargs) File "/usr/share/virt-manager/virtManager/domain.py", line 1489, in startup self._backend.create() File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1062, in create if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self) libvirtError: unsupported configuration: Unable to find security driver for model apparmor -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c1
James Fehlig
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c2
Holger Sickenberg
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c3
--- Comment #3 from Holger Sickenberg
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c4
--- Comment #4 from Holger Sickenberg
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c5
--- Comment #5 from Holger Sickenberg
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c6
--- Comment #6 from James Fehlig
Interesting detail: the <seclabel type="none" model="apparmor"/> is part of the dump but not in the /etc/libvirt/qemu/sles12sp3.xml - so it seem to come from some global config?!
If apparmor is enabled, the apparmor security driver is loaded at libvirtd startup. When a domain is started, the <seclabel> is added to the active domain XML. When domain is shutdown, its active XML is discarded and you're only left with the persistent XML (/etc/libvirt/<hypervisor>/<dom-name>.xml), assuming the domain is persistent. Transient domains only have active XML. You must have saved the domain on a machine where apparmor was enabled. The active XML is saved in the state file, and that active XML is now failing to restore on a machine where apparmor is disabled. This bug is definitely a duplicate of bug#1049505, but that's a non-public SLES bug. libvirt can help your predicament though. You can use 'virsh save-image-edit /path/to/state/file' to remove the <seclabel> element, and subsequently restore your machine. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c7
--- Comment #7 from James Fehlig
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c8
--- Comment #8 from Holger Sickenberg
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c10
James Fehlig
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c11
--- Comment #11 from James Fehlig
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c13
--- Comment #13 from Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c14
--- Comment #14 from Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c15
--- Comment #15 from Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
http://bugzilla.suse.com/show_bug.cgi?id=1051017#c16
--- Comment #16 from Swamp Workflow Management
http://bugzilla.suse.com/show_bug.cgi?id=1051017
Swamp Workflow Management
participants (1)
-
bugzilla_noreply@novell.com