[SOLVED] cannot load AppArmor profile

luke-ws · Sep 1st 2024

Hello,

I've installed and configured without any problem KVM plugin.

After an update and a reboot, now the VM doesn't start:

Code

500 - Internal Server Error
Unable to - poweroninternal error: cannot load AppArmor profile 'libvirt-f4b3ff86-bced-4b36-a912-033b5156b152'

Into /etc/apparmor.d/libvirt/ i've this files:

Code

-rw-r--r--  1 root root  293  3 ago 08.03 libvirt-3573a5ef-13ff-46cf-98a2-4e07f017e20b
-rw-r--r--  1 root root  585  3 ago 08.22 libvirt-3573a5ef-13ff-46cf-98a2-4e07f017e20b.files
-rw-r--r--  1 root root  293  5 ago 07.13 libvirt-9a69edf1-7ed0-4667-85e9-075a92d0eef9
-rw-r--r--  1 root root  679  5 ago 08.03 libvirt-9a69edf1-7ed0-4667-85e9-075a92d0eef9.files
-rw-r--r--  1 root root  293  3 ago 08.23 libvirt-f9447079-7e98-49ff-a833-69cd615a4c36
-rw-r--r--  1 root root  342 16 gen  2023 TEMPLATE.lxc
-rw-r--r--  1 root root  192 16 gen  2023 TEMPLATE.qemu

I never used apparmor but searching on google the solution seems to be "disable apparmor into configuration" for this vm.

With command virsh edit HA, I've tried to insert the directive

Code

<security>
  <apparmor>
    <mode>disable</mode>
  </apparmor>
</security>

after <features>...</features> but virsh return an error

Code

error: XML document failed to validate against schema: Unable to validate doc against /usr/share/libvirt/schemas/domain.rng
Element domain has extra content: security

Failed. Try again? [y,n,i,f,?]:

Any idea?

luke-ws · Sep 2nd 2024

aa-complain libvirt-f4b3ff86-bced-4b36-a912-033b5156b152

Code

Can't find libvirt-f4b3ff86-bced-4b36-a912-033b5156b152 in the system path list. If the name of the application
is correct, please run 'which libvirt-f4b3ff86-bced-4b36-a912-033b5156b152' as a user with correct PATH
environment set up in order to find the fully-qualified path and
use the full path as parameter.

find / -iname "*f4b3ff86-bced-4b36-a912-033b5156b152*"

Code

find: ‘/proc/368232/task/368232/net’: Argomento non valido
find: ‘/proc/368232/net’: Argomento non valido

I don't understand the error message

Code

cannot load AppArmor profile 'libvirt-f4b3ff86-bced-4b36-a912-033b5156b152'

aa-status return

Code

apparmor module is loaded.
22 profiles are loaded.
19 profiles are in enforce mode.
   /usr/bin/lxc-start
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/sbin/chronyd
   /{,usr/}sbin/dhclient
   libreoffice-senddoc
   libreoffice-soffice//gpg
   libreoffice-xpdfimport
   libvirtd
   libvirtd//qemu_bridge_helper
   lsb_release
   lxc-container-default
   lxc-container-default-cgns
   lxc-container-default-with-mounting
   lxc-container-default-with-nesting
   nvidia_modprobe
   nvidia_modprobe//kmod
   virt-aa-helper
3 profiles are in complain mode.
   /usr/sbin/hassio-supervisor
   libreoffice-oosplash
   libreoffice-soffice
0 profiles are in kill mode.
0 profiles are in unconfined mode.
3 processes have profiles defined.
1 processes are in enforce mode.
   /usr/sbin/libvirtd (366441) libvirtd
0 processes are in complain mode.
2 processes are unconfined but have a profile defined.
   /usr/sbin/chronyd (1120)
   /usr/sbin/chronyd (1121)
0 processes are in mixed mode.
0 processes are in kill mode.

Display More

luke-ws · Sep 2nd 2024

after some aa-complain and a reboot, the problem was fixed.

tnx everybody for help

[SOLVED] cannot load AppArmor profile

luke-ws Sep 2nd 2024

Participate now!

Similar Threads

SMB will not start

Tags