[Pkg-libvirt-maintainers] Bug#846050: libvirt-daemon-system: Cannot create VM - cannot load AppArmor profile

[Derth Lambert]

Package: libvirt-daemon-system
Version: 2.4.0-1+b1
Severity: normal

Dear Maintainer,

Trying to create a virtual machine using Virt-Manager interface OR import any
existing using "virsh define *.xml" result in:

Unable to complete install: 'internal error: cannot load AppArmor profile
'libvirt-xxxxxxx-xxxx-....'

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in
cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/create.py", line 2288, in
_do_async_install
    guest.start_install(meter=meter)
  File "/usr/share/virt-manager/virtinst/guest.py", line 461, in start_install
    doboot, transient)
  File "/usr/share/virt-manager/virtinst/guest.py", line 396, in _create_guest
    self.domain = self.conn.createXML(install_xml or final_xml, 0)
  File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3773, in createXML
    if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self)
libvirtError: internal error: cannot load AppArmor profile 'libvirt-xxxxxxx-
xxxx-....'

It is brand new fresh Stretch install with apparmor enabled following Wiki.
there are no files created under /etc/apparmor.d/libvirt or any log errors
different from the above.

Cannot create any new VMs. This Debian Stretch brand new install fully updated
(stretch only, sid is pinned at -10).



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libvirt-daemon-system depends on:
ii  adduser              3.115
ii  gettext-base         0.19.8.1-1
ii  init-system-helpers  1.46
ii  libapparmor1         2.10.95-6
ii  libaudit1            1:2.6.7-1
ii  libblkid1            2.29-1
ii  libc6                2.24-5
ii  libcap-ng0           0.7.7-3
ii  libdbus-1-3          1.10.12-1
ii  libdevmapper1.02.1   2:1.02.136-1
ii  libnl-3-200          3.2.27-1
ii  libnl-route-3-200    3.2.27-1
ii  libnuma1             2.0.11-2
ii  librados2            0.80.11-1.1
ii  librbd1              0.80.11-1.1
ii  libselinux1          2.6-3
ii  libvirt-clients      2.4.0-1+b1
ii  libvirt-daemon       2.4.0-1+b1
ii  libvirt0             2.4.0-1+b1
ii  libxml2              2.9.4+dfsg1-2.1
ii  libyajl2             2.1.0-2
ii  logrotate            3.8.7-2
ii  policykit-1          0.105-17

Versions of packages libvirt-daemon-system recommends:
ii  bridge-utils  1.5-10
ii  dmidecode     3.0-4
ii  dnsmasq-base  2.76-4
ii  ebtables      2.0.10.4-3.5
ii  iproute2      4.8.0-1
ii  iptables      1.6.0-4
ii  parted        3.2-16+b1

Versions of packages libvirt-daemon-system suggests:
ii  apparmor    2.10.95-6
ii  auditd      1:2.6.7-1
ii  nfs-common  1:1.2.8-9.2
pn  pm-utils    <none>
pn  radvd       <none>
ii  systemd     232-6
pn  systemtap   <none>
pn  zfsutils    <none>

-- Configuration Files:
/etc/libvirt/nwfilter/allow-arp.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/allow-arp.xml'
/etc/libvirt/nwfilter/allow-dhcp-server.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/allow-dhcp-server.xml'
/etc/libvirt/nwfilter/allow-dhcp.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/allow-dhcp.xml'
/etc/libvirt/nwfilter/allow-incoming-ipv4.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/allow-incoming-ipv4.xml'
/etc/libvirt/nwfilter/allow-ipv4.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/allow-ipv4.xml'
/etc/libvirt/nwfilter/clean-traffic.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/clean-traffic.xml'
/etc/libvirt/nwfilter/no-arp-ip-spoofing.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-arp-ip-spoofing.xml'
/etc/libvirt/nwfilter/no-arp-mac-spoofing.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-arp-mac-spoofing.xml'
/etc/libvirt/nwfilter/no-arp-spoofing.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-arp-spoofing.xml'
/etc/libvirt/nwfilter/no-ip-multicast.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-ip-multicast.xml'
/etc/libvirt/nwfilter/no-ip-spoofing.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-ip-spoofing.xml'
/etc/libvirt/nwfilter/no-mac-broadcast.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-mac-broadcast.xml'
/etc/libvirt/nwfilter/no-mac-spoofing.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-mac-spoofing.xml'
/etc/libvirt/nwfilter/no-other-l2-traffic.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-other-l2-traffic.xml'
/etc/libvirt/nwfilter/no-other-rarp-traffic.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/no-other-rarp-traffic.xml'
/etc/libvirt/nwfilter/qemu-announce-self-rarp.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/qemu-announce-self-rarp.xml'
/etc/libvirt/nwfilter/qemu-announce-self.xml [Errno 13] Permission denied: u'/etc/libvirt/nwfilter/qemu-announce-self.xml'
/etc/libvirt/qemu.conf [Errno 13] Permission denied: u'/etc/libvirt/qemu.conf'
/etc/libvirt/qemu/networks/default.xml [Errno 13] Permission denied: u'/etc/libvirt/qemu/networks/default.xml'

-- no debconf information