networking does not come up in cloud image on hyper-v

Bug #1220918 reported by Scott Moser
18
This bug affects 2 people
Affects Status Importance Assigned to Milestone
isc-dhcp (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Hi,
  Upon testing ubuntu cloud images on Hyper-v and openstack, we found that 12.04 images seem to work fine.
  However, the 13.10 saucy images are not working properly. The network interface doesn't seem to come up.

It would appear that the network interface isn't functioning properly, and apparently 'ifup' after logging in correctly brought it up. so possibly something racy on early boot bringup.

ProblemType: Bug
DistroRelease: Ubuntu 13.10
Package: linux-image-3.11.0-4-generic 3.11.0-4.9
ProcVersionSignature: Ubuntu 3.11.0-4.9-generic 3.11.0-rc7
Uname: Linux 3.11.0-4-generic x86_64
AlsaDevices:
 total 0
 crw-rw---- 1 root audio 116, 1 Sep 4 19:21 seq
 crw-rw---- 1 root audio 116, 33 Sep 4 19:21 timer
AplayDevices: Error: [Errno 2] No such file or directory: 'aplay'
ApportVersion: 2.12.1-0ubuntu3
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord'
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
CRDA: Error: [Errno 2] No such file or directory: 'iw'
CurrentDmesg:
 [ 1236.868192] type=1400 audit(1378323693.244:15): apparmor="DENIED" operation="capable" parent=1387 profile="/sbin/dhclient" pid=1474 comm="dhclient" pid=1474 comm="dhclient" capability=12 capname="net_admin"
 [ 1809.501200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input3
Date: Wed Sep 4 19:58:45 2013
IwConfig:
 eth0 no wireless extensions.

 lo no wireless extensions.
Lsusb: Error: command ['lsusb'] failed with exit code 1: unable to initialize libusb: -99
MachineType: Microsoft Corporation Virtual Machine
MarkForUpload: True
PciMultimedia:

ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcFB:

ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.11.0-4-generic root=LABEL=cloudimg-rootfs ro console=tty1 console=ttyS0
RelatedPackageVersions:
 linux-restricted-modules-3.11.0-4-generic N/A
 linux-backports-modules-3.11.0-4-generic N/A
 linux-firmware N/A
RfKill: Error: [Errno 2] No such file or directory: 'rfkill'
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 05/23/2012
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: 090006
dmi.board.name: Virtual Machine
dmi.board.vendor: Microsoft Corporation
dmi.board.version: 7.0
dmi.chassis.asset.tag: 9555-0409-0428-2805-6577-1978-49
dmi.chassis.type: 3
dmi.chassis.vendor: Microsoft Corporation
dmi.chassis.version: 7.0
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr090006:bd05/23/2012:svnMicrosoftCorporation:pnVirtualMachine:pvr7.0:rvnMicrosoftCorporation:rnVirtualMachine:rvr7.0:cvnMicrosoftCorporation:ct3:cvr7.0:
dmi.product.name: Virtual Machine
dmi.product.version: 7.0
dmi.sys.vendor: Microsoft Corporation

Related branches

Revision history for this message
Scott Moser (smoser) wrote :
Revision history for this message
Scott Moser (smoser) wrote :

attaching email exchange

Revision history for this message
Tim Gardner (timg-tpi) wrote :

This seems a lot like a udev issue.

Revision history for this message
Joseph Salisbury (jsalisbury) wrote :

Does this bug happen if you boot the raring kernel with a Saucy image?

tags: added: kernel-da-key
Changed in linux (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Martin Pitt (pitti) wrote :

Looking at this, it looks like an apparmor issue. udev isn't related at all with building up network connections.

 [ 1236.868192] type=1400 audit(1378323693.244:15): apparmor="DENIED" operation="capable" parent=1387 profile="/sbin/dhclient" pid=1474 comm="dhclient" pid=1474 comm="dhclient" capability=12 capname="net_admin"

Changed in udev (Ubuntu):
status: New → Invalid
Revision history for this message
Adrian Vladu (avladu) wrote :

Martin Pitt, you are right.
I ran:
sudo /etc/init.d/apparmor stop
sudo /etc/init.d/apparmor teardown
sudo update-rc.d -f apparmor remove

After reboot, the instance has been provisioned successfully(I have used http source for openstack metadata).

affects: linux (Ubuntu) → isc-dhcp (Ubuntu)
Changed in isc-dhcp (Ubuntu):
status: Incomplete → Confirmed
tags: added: apparmor
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package isc-dhcp - 4.2.4-7ubuntu7

---------------
isc-dhcp (4.2.4-7ubuntu7) saucy; urgency=low

  * debian/apparmor-profile.dhclient: added net_admin capability, which is
    now required in certain scenarios. (LP: #1220918)
 -- Marc Deslauriers <email address hidden> Fri, 06 Sep 2013 12:42:03 -0400

Changed in isc-dhcp (Ubuntu):
status: Confirmed → Fix Released
Revision history for this message
Adrian Vladu (avladu) wrote :

I found the package here: https://launchpad.net/ubuntu/+source/isc-dhcp/4.2.4-7ubuntu7 .
The source used: https://launchpad.net/ubuntu/+archive/primary/+files/isc-dhcp_4.2.4.orig.tar.gz

After I have installed the package(configure/make/make install), on reboot the vm has been successfully provisioned.

Revision history for this message
Scott Moser (smoser) wrote :

Hi Adrian,
  I'd really appreciate it if you could re-test this with an image from http://cloud-images.ubuntu.com/saucy/ on Monday or so. An image with date 20130909 will surely have the kernel and dhcp inside it. That test will give us a full "just works" that we're looking for.

Revision history for this message
Adrian Vladu (avladu) wrote :

Hello,
    I will test as soon as the image is up.

Revision history for this message
Adrian Vladu (avladu) wrote :

Hi Scott,
    I redid the tests - the saucy vm booted and was provisioned successfully on Hyper-V compute node.
    I have used http://cloud-images.ubuntu.com/saucy/20130909/saucy-server-cloudimg-amd64-disk1.img .

Revision history for this message
Scott Moser (smoser) wrote :

Thank you, Adrian.

Mathew Hodson (mhodson)
no longer affects: udev (Ubuntu)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.