[Bug 1062966] New: internal error: child reported: Kernel does not provide mount namespace: Permission denied - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 1062269] GNOME dumps core due...

[Bug 1062966] New: internal error: child reported: Kernel does not provide mount namespace: Permission denied

older
[Bug 1063058] New: numba broken...

bugzilla_noreply＠novell.com

12 Oct 2017 12 Oct '17

09:52

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 Bug ID: 1062966 Summary: internal error: child reported: Kernel does not provide mount namespace: Permission denied Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs@suse.de Reporter: matwey.kornilov@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Hi, I've just upgraded to 42.3 from 42.2. And I cant start any VM using libvirt: virsh # list --all Id Name State ---------------------------------------------------- - leap423 shut off - tumbleweed shut off virsh # start tumbleweed error: Failed to start domain tumbleweed error: internal error: child reported: Kernel does not provide mount namespace: Permission denied libvirt version is 3.3.0 kernel is 4.4.87-25-default -- You are receiving this mail because: You are on the CC list for the bug.

Attachments:

attachment.htm (text/html — 2.7 KB)

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

12 Oct 12 Oct

14:39

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c1 James Fehlig changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jfehlig@suse.com, | |matwey.kornilov@gmail.com Flags| |needinfo?(matwey.kornilov@g | |mail.com) --- Comment #1 from James Fehlig --- Sounds familiar: bug#1058847. But in that case kernel 4.13 was needed to see the bug. Do you have apparmor enabled? If so, what is emitted to /var/log/audit/audit.log when attempting to start a VM? -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:23

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c2 Matwey Kornilov changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(matwey.kornilov@g | |mail.com) | --- Comment #2 from Matwey Kornilov --- Created attachment 744131 --> http://bugzilla.opensuse.org/attachment.cgi?id=744131&action=edit audit.log -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:57

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c3 James Fehlig changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(matwey.kornilov@g | |mail.com) --- Comment #3 from James Fehlig --- Thanks for the audit log. BTW, I assume you can start VMs after disabling apparmor? E.g. # systemctl stop libvirtd.service # systemctl stop apparmor.service # systemctl start libvirtd.service -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:04

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c4 --- Comment #4 from James Fehlig --- Can you attach /etc/apparmor.d/usr.sbin.libvirtd as well? -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:18

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c5 --- Comment #5 from Matwey Kornilov --- Created attachment 744141 --> http://bugzilla.opensuse.org/attachment.cgi?id=744141&action=edit provided by libvirt-daemon-3.3.0-6.1.aarch64 -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:20

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c6 Matwey Kornilov changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(matwey.kornilov@g | |mail.com) | --- Comment #6 from Matwey Kornilov --- (In reply to James Fehlig from comment #3)

Thanks for the audit log. BTW, I assume you can start VMs after disabling apparmor? E.g.

# systemctl stop libvirtd.service # systemctl stop apparmor.service # systemctl start libvirtd.service

This helps. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:38

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c7 James Fehlig changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #7 from James Fehlig --- Ok, so you got the 'flags=(attach_disconnected)' change to /etc/apparmor.d/usr.sbin.libvirtd that came with the 3.3.0 update. Perhaps you are hitting another issue mentioned in bug#1060860, specifically the libvirtd profile is not reloaded after update (see bottom of comment#4 in that bug). That issue has been fixed as well. It sounds like your problem is resolved by reloading the profiles, so I'll close this bug for now. Reopen if the problem occurs again. Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:41

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c8 --- Comment #8 from Matwey Kornilov --- Should not reboot helps then? If so, it doesn't. Issue still persists after reboot. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:53

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c9 Matwey Kornilov changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #9 from Matwey Kornilov --- Ok, I removed all files from /var/lib/apparmor/cache and this helped after reboot. -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17:53

New subject: [Bug 1062966] internal error: child reported: Kernel does not provide mount namespace: Permission denied

http://bugzilla.opensuse.org/show_bug.cgi?id=1062966 http://bugzilla.opensuse.org/show_bug.cgi?id=1062966#c10 Matwey Kornilov changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #10 from Matwey Kornilov --- Close -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

2443

Age (days ago)

2443

Last active (days ago)

Download

10 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com