OpenStack Nova Compute Charm

  1. Bug #1896617
  2. Comment #14

Comment 14 for bug 1896617

Revision history for this message
Vladimir Grevtsev (vlgrevtsev) wrote : Re: Creation of image (or live snapshot) from the existing VM fails if libvirt-image-backend is configured to qcow2 starting from Ussuri

> I assume this could be an app-armour denial?

I can see the following in the dmesg @ the compute node:

Sep 23 13:03:06 node09 kernel: [12572.344288] audit: type=1400 audit(1600866186.496:34): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-645f031e-7426-4ad0-8263-5cc35e8be8a8" pid=8563 comm="apparmor_parser"
Sep 23 13:51:58 node09 kernel: [15504.209400] audit: type=1400 audit(1600869118.381:35): apparmor="DENIED" operation="ptrace" profile="libvirtd" pid=7242 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="/usr/bin/nova-compute"
Sep 23 13:51:59 node09 kernel: [15505.337932] audit: type=1400 audit(1600869119.509:36): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/nova-compute" pid=25073 comm="apparmor_parser"
Sep 23 13:52:03 node09 kernel: [15509.470269] audit: type=1400 audit(1600869123.641:37): apparmor="DENIED" operation="ptrace" profile="libvirtd" pid=7242 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="/usr/bin/nova-compute"

However, nothing new is appearing when I'm invoking the "server image create" command.