apparmor blocking live snapshot creation.

asked 2014-03-21 16:25:44 -0500

sneezewort gravatar image

updated 2014-03-21 17:13:54 -0500

When attempting to make a snapshot of a running VM the snapshot is immediatly deleted and the following is found in the logs.

From syslog:

Mar 21 14:51:33 c02 kernel: [  362.884180] type=1400 audit(1395435093.546:25): apparmor="DENIED" operation="file_perm" parent=1 profile="libvirt-4bc7cdba-47af-48c6-81a9-b24515e95717" name="/var/lib/nova/instances/4bc7cdba-47af-48c6-81a9-b24515e95717/disk" pid=4063 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=109 ouid=109

If I disable the libvirt profiles using :

sudo aa-complain /usr/sbin/libvirtd

Then any new instance I create can be snapshoted without shutting down.

Anyone know how to resolve this so I can continue to use these apparmor profiles?

edit retag flag offensive close merge delete