[Pkg-libvirt-maintainers] Bug#843940: libvirt-daemon: "Permission denied" errors in VMM/virt-manager when dynamic_ownership=0

[J Mo]

Package: libvirt-daemon
Version: 2.4.0-1+b1
Severity: important

I discovered today that setting "dynamic_ownership = 0" in
/etc/libvirt/qemu.conf seems to break the creation of new VMs.

I set dynamic_ownership=0 because libvirt was improperly seizing 
ownership of read-only ISO images.

Unfortunately, libvirt doesn't seem to be smart enough to change the
permission of newly created .qcow2 files under /var/lib/libvirt/images
when dynamic_ownership=0.

I get the following error with VMM/virt-manager when attempting to
create a new VM:



Unable to complete install: 'internal error: qemu unexpectedly closed the monitor: 2016-11-11T02:00:33.137524Z qemu-system-x86_64: -drive file=/var/lib/libvirt/images/Debian_stable_test2.qcow2,format=qcow2,if=none,id=drive-virtio-disk0: Could not open '/var/lib/libvirt/images/Debian_stable_test2.qcow2': Permission denied'

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/create.py", line 2288, in _do_async_install
    guest.start_install(meter=meter)
  File "/usr/share/virt-manager/virtinst/guest.py", line 461, in start_install
    doboot, transient)
  File "/usr/share/virt-manager/virtinst/guest.py", line 396, in _create_guest
    self.domain = self.conn.createXML(install_xml or final_xml, 0)
  File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3777, in createXML
    if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self)
libvirtError: internal error: qemu unexpectedly closed the monitor: 2016-11-11T02:00:33.137524Z qemu-system-x86_64: -drive file=/var/lib/libvirt/images/Debian_stable_test2.qcow2,format=qcow2,if=none,id=drive-virtio-disk0: Could not open '/var/lib/libvirt/images/Debian_stable_test2.qcow2': Permission denied




-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libvirt-daemon depends on:
ii  libapparmor1        2.10.95-4
ii  libaudit1           1:2.6.5-1
ii  libavahi-client3    0.6.32-1
ii  libavahi-common3    0.6.32-1
ii  libblkid1           2.28-6
ii  libc6               2.23-4
ii  libcap-ng0          0.7.7-3
ii  libdbus-1-3         1.10.8-1
ii  libdevmapper1.02.1  2:1.02.130-1
ii  libfuse2            2.9.7-1
ii  libgnutls30         3.5.6-2
ii  libnetcf1           1:0.2.8-1
ii  libnl-3-200         3.2.27-1
ii  libnl-route-3-200   3.2.27-1
ii  libnuma1            2.0.11-1
ii  libparted2          3.2-15
ii  libpcap0.8          1.7.4-2
ii  libpciaccess0       0.13.4-1
ii  librados2           0.80.11-1
ii  librbd1             0.80.11-1
ii  libsasl2-2          2.1.26.dfsg1-15
ii  libselinux1         2.5-3
ii  libssh2-1           1.7.0-1
ii  libudev1            231-1
ii  libvirt0            2.4.0-1+b1
ii  libxen-4.8          4.8.0~rc3-1
ii  libxenstore3.0      4.6.0-1+nmu2
ii  libxml2             2.9.3+dfsg1-1.2
ii  libyajl2            2.1.0-2

Versions of packages libvirt-daemon recommends:
ii  libxml2-utils   2.9.4+dfsg1-1+b1
ii  netcat-openbsd  1.105-7
ii  qemu            1:2.6+dfsg-3.1
ii  qemu-kvm        1:2.6+dfsg-3.1

Versions of packages libvirt-daemon suggests:
ii  libvirt-daemon-system  2.4.0-1+b1

-- no debconf information