On Mon, Nov 28, 2016 at 02:16:38AM -0500, Derth Lambert wrote: > Package: libvirt-daemon-system > Version: 2.4.0-1+b1 > Severity: normal > > Dear Maintainer, > > Trying to create a virtual machine using Virt-Manager interface OR import any > existing using "virsh define *.xml" result in: > > Unable to complete install: 'internal error: cannot load AppArmor profile > 'libvirt-xxxxxxx-xxxx-....' > > Traceback (most recent call last): > File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in > cb_wrapper > callback(asyncjob, *args, **kwargs) > File "/usr/share/virt-manager/virtManager/create.py", line 2288, in > _do_async_install > guest.start_install(meter=meter) > File "/usr/share/virt-manager/virtinst/guest.py", line 461, in start_install > doboot, transient) > File "/usr/share/virt-manager/virtinst/guest.py", line 396, in _create_guest > self.domain = self.conn.createXML(install_xml or final_xml, 0) > File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3773, in createXML > if ret is None:raise libvirtError('virDomainCreateXML() failed', > conn=self) > libvirtError: internal error: cannot load AppArmor profile 'libvirt-xxxxxxx- > xxxx-....' > > It is brand new fresh Stretch install with apparmor enabled following Wiki. > there are no files created under /etc/apparmor.d/libvirt or any log errors > different from the above.
Reduce the domain XML to a minimal test case and attach it to the bugreport please. You can also check if validation works with DOM=<DOMNAME> /usr/lib/libvirt/virt-aa-helper -d -r -p 0 -u libvirt-$(virsh domuuid $DOM) < /etc/libvirt/qemu/$DOM.xml Replace <DONAME> with the name of your domain. Cheers, -- Guido