[Pkg-libvirt-maintainers] Bug#846050: libvirt-daemon-system: Cannot create VM - cannot load AppArmor profile

[Guido Günther]

On Mon, Nov 28, 2016 at 02:16:38AM -0500, Derth Lambert wrote:
> Package: libvirt-daemon-system
> Version: 2.4.0-1+b1
> Severity: normal
> 
> Dear Maintainer,
> 
> Trying to create a virtual machine using Virt-Manager interface OR import any
> existing using "virsh define *.xml" result in:
> 
> Unable to complete install: 'internal error: cannot load AppArmor profile
> 'libvirt-xxxxxxx-xxxx-....'
> 
> Traceback (most recent call last):
>   File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in
> cb_wrapper
>     callback(asyncjob, *args, **kwargs)
>   File "/usr/share/virt-manager/virtManager/create.py", line 2288, in
> _do_async_install
>     guest.start_install(meter=meter)
>   File "/usr/share/virt-manager/virtinst/guest.py", line 461, in start_install
>     doboot, transient)
>   File "/usr/share/virt-manager/virtinst/guest.py", line 396, in _create_guest
>     self.domain = self.conn.createXML(install_xml or final_xml, 0)
>   File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3773, in createXML
>     if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self)
> libvirtError: internal error: cannot load AppArmor profile 'libvirt-xxxxxxx-
> xxxx-....'
> 
> It is brand new fresh Stretch install with apparmor enabled following Wiki.
> there are no files created under /etc/apparmor.d/libvirt or any log errors
> different from the above.

Reduce the domain XML to a minimal test case and attach it to the
bugreport please.

You can also check if validation works with

    DOM=<DOMNAME>
    /usr/lib/libvirt/virt-aa-helper -d -r -p 0 -u libvirt-$(virsh domuuid $DOM)  < /etc/libvirt/qemu/$DOM.xml

Replace <DONAME> with the name of your domain.

Cheers,
-- Guido