[Pkg-libvirt-maintainers] Bug#990307: virtinst: Installation fails: cannot load AppArmor profile

[Michal Herko]

Package: virtinst
Version: 1:3.2.0-3
Severity: normal
X-Debbugs-Cc: michal.herko at disroot.org

Dear Maintainer,

I'm trying to use *virt-install* command to create a new virtual machine
under qemu:///system uri.

The command

    # virt-install --name lackey --memory 4096 --cdrom Stiahnuté/Windows\ 10\ X64\ 20H2\ Pro\ OEM\ ESD\ MULTi-7\ MARCH\ 2021\ \{Gen2\}/WIN10X64.MULTi-7.MAR2021.iso --os-variant win10 --disk size=99

fails with error message:

ERROR    internal error: cannot load AppArmor profile 'libvirt-44fdd1be-0f7f-4c39-ba82-72ed52392b84'

The virtual machine is not created.
The expected outcome is to continue the process of installing the
virtual machine.

The same command executed under ordinary user work correctly.

I am attaching the debug output of virt-install command, and the logs of
libvirtd service.

-- System Information:
Debian Release: 11.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-7-amd64 (SMP w/8 CPU threads)
Locale: LANG=sk_SK.UTF-8, LC_CTYPE=sk_SK.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages virtinst depends on:
ii  e2fsprogs             1.46.2-1
ii  genisoimage           9:1.1.11-3.2
ii  gir1.2-libosinfo-1.0  1.8.0-1
ii  python3               3.9.2-3
ii  python3-gi            3.38.0-2
ii  python3-libvirt       7.0.0-2
ii  python3-libxml2       2.9.10+dfsg-6.7
ii  python3-requests      2.25.1+dfsg-2

Versions of packages virtinst recommends:
ii  libvirt-clients  7.0.0-3
ii  qemu-utils       1:5.2+dfsg-10+b2
ii  virt-viewer      7.0-2

Versions of packages virtinst suggests:
pn  python3-argcomplete  <none>

Versions of packages virtinst is related to:
ii  libvirt-clients  7.0.0-3
ii  libvirt-daemon   7.0.0-3
ii  libvirt0         7.0.0-3
ii  osinfo-db        0.20210215-1

-- no debconf information