[Pkg-libvirt-maintainers] Bug#892945: Cannot start domain using user session

[Laurent Bigonville]

Package: libvirt-daemon
Version: 4.0.0-2
Severity: serious

Hi,

I cannot start a domain using a libvirt user session. I'm getting the following message:

Impossible de terminer l’installation : « internal error: process exited while connecting to monitor: Could not access KVM kernel module: Permission denied
2018-03-14T18:32:12.683550Z qemu-system-x86_64: failed to initialize KVM: Permission denied »

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 89, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/create.py", line 2545, in _do_async_install
    guest.start_install(meter=meter)
  File "/usr/share/virt-manager/virtinst/guest.py", line 498, in start_install
    doboot, transient)
  File "/usr/share/virt-manager/virtinst/guest.py", line 434, in _create_guest
    domain = self.conn.createXML(install_xml or final_xml, 0)
  File "/usr/lib/python2.7/dist-packages/libvirt.py", line 3659, in createXML
    if ret is None:raise libvirtError('virDomainCreateXML() failed', conn=self)
libvirtError: internal error: process exited while connecting to monitor: Could not access KVM kernel module: Permission denied
2018-03-14T18:32:12.683550Z qemu-system-x86_64: failed to initialize KVM: Permission denied

My user is part of the libvirt group. Is polkit somehow broken or something?

Kind regards,

Laurent Bigonville

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.15.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: refpolicy

Versions of packages libvirt-daemon depends on:
ii  libacl1             2.2.52-3+b1
ii  libapparmor1        2.12-3
ii  libaudit1           1:2.8.2-1
ii  libavahi-client3    0.7-3.1
ii  libavahi-common3    0.7-3.1
ii  libblkid1           2.31.1-0.5
ii  libc6               2.27-2
ii  libcap-ng0          0.7.7-3.1+b1
ii  libcurl3-gnutls     7.58.0-2
ii  libdbus-1-3         1.13.2-1bigon1
ii  libdevmapper1.02.1  2:1.02.145-4.1
ii  libfuse2            2.9.7-1
ii  libgnutls30         3.5.18-1
ii  libnetcf1           1:0.2.8-1+b2
ii  libnl-3-200         3.2.27-2
ii  libnl-route-3-200   3.2.27-2
ii  libnuma1            2.0.11-2.1
ii  libparted2          3.2-20
ii  libpcap0.8          1.8.1-6
ii  libpciaccess0       0.13.4-1+b2
ii  libsasl2-2          2.1.27~101-g0780600+dfsg-3
ii  libselinux1         2.7-2+b1
ii  libssh2-1           1.8.0-1
ii  libudev1            238-2
ii  libvirt0            4.0.0-2
ii  libxen-4.8          4.8.3+comet2+shim4.10.0+comet3-1+deb9u5
ii  libxenstore3.0      4.8.3+comet2+shim4.10.0+comet3-1+deb9u5
ii  libxml2             2.9.4+dfsg1-6.1
ii  libyajl2            2.1.0-2+b3

Versions of packages libvirt-daemon recommends:
ii  libxml2-utils   2.9.4+dfsg1-6.1
ii  netcat-openbsd  1.187-1
ii  qemu-kvm        1:2.11+dfsg-1

Versions of packages libvirt-daemon suggests:
pn  libvirt-daemon-driver-storage-gluster   <none>
pn  libvirt-daemon-driver-storage-rbd       <none>
pn  libvirt-daemon-driver-storage-sheepdog  <none>
pn  libvirt-daemon-driver-storage-zfs       <none>
ii  libvirt-daemon-system                   4.0.0-2
pn  numad                                   <none>

-- no debconf information