[Pkg-libvirt-maintainers] Bug#1094583: libvirt-daemon-driver-qemu: apparmor template missing from filesystem

[Kevin Otte]

Package: libvirt-daemon-driver-qemu
Version: 11.0.0-1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

The package manifest includes an AppArmor template, but it is not seen on the filesystem after the package is installed:

root at saratoga:/tmp# dpkg -L libvirt-daemon-driver-qemu | grep -i template
/etc/apparmor.d/libvirt/TEMPLATE.qemu
root at saratoga:/tmp# ls -l /etc/apparmor.d/libvirt/
total 0

This has the effect of rendering virt-install/virt-manager unable to deploy any new VMs:

Unable to complete install: 'internal error: cannot load AppArmor profile 'libvirt-f9987331-aa46-412e-baf0-bdef4b5a631e''

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 71, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
    ~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/virt-manager/virtManager/createvm.py", line 2008, in _do_async_install
    installer.start_install(guest, meter=meter)
    ~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^
  File "/usr/share/virt-manager/virtinst/install/installer.py", line 726, in start_install
    domain = self._create_guest(
            guest, meter, initial_xml, final_xml,
            doboot, transient)
  File "/usr/share/virt-manager/virtinst/install/installer.py", line 667, in _create_guest
    domain = self.conn.createXML(initial_xml or final_xml, 0)
  File "/usr/lib/python3/dist-packages/libvirt.py", line 4545, in createXML
    raise libvirtError('virDomainCreateXML() failed')
libvirt.libvirtError: internal error: cannot load AppArmor profile 'libvirt-f9987331-aa46-412e-baf0-bdef4b5a631e'


2025-01-28T11:21:15.809798-05:00 saratoga libvirtd[1025]: internal error: Child process (LIBVIRT_LOG_OUTPUTS=3:stderr /usr/lib/libvirt/virt-aa-helper -c -u lib
virt-f9987331-aa46-412e-baf0-bdef4b5a631e) unexpected exit status 1: virt-aa-helper: error: template does not exist#012virt-aa-helper: error: could not create 
profile
2025-01-28T11:21:15.809885-05:00 saratoga libvirtd[1025]: internal error: cannot load AppArmor profile 'libvirt-f9987331-aa46-412e-baf0-bdef4b5a631e'


-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.10-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libvirt-daemon-driver-qemu depends on:
ii  adduser                     3.137
ii  debconf [debconf-2.0]       1.5.89
ii  libc6                       2.40-6
ii  libgcc-s1                   14.2.0-12
ii  libglib2.0-0t64             2.82.4-2
ii  libgnutls30t64              3.8.8-2
ii  libselinux1                 3.7-3+b1
ii  libvirt-common              11.0.0-1
ii  libvirt-daemon-log          11.0.0-1
ii  libvirt0                    11.0.0-1
ii  libxml2                     2.12.7+dfsg+really2.9.14-0.2+b1
ii  logrotate                   3.22.0-1
ii  qemu-system-x86 [qemu-kvm]  1:9.2.0+ds-5
ii  systemd-container           257.2-1

Versions of packages libvirt-daemon-driver-qemu recommends:
ii  passt        0.0~git20250121.4f2c8e7-1
ii  swtpm        0.7.1-1.5
ii  swtpm-tools  0.7.1-1.5

Versions of packages libvirt-daemon-driver-qemu suggests:
pn  numad  <none>

-- Configuration Files:
/etc/apparmor.d/libvirt/TEMPLATE.qemu [file not found]
/etc/libvirt/qemu-lockd.conf [file not found]
/etc/libvirt/qemu-sanlock.conf [file not found]
/etc/libvirt/qemu.conf [Errno 13] Permission denied: '/etc/libvirt/qemu.conf'
/etc/logrotate.d/libvirtd.qemu [file not found]

-- debconf information excluded