<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Times New Roman; font-size: 12pt; color: #000000'><br>The problem was solved after killing the apparmor process and restarting apparmor service.<br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>De: </b>"Mohamed Mohamed" <mohamed.mohamed@telecom-sudparis.eu><br><b>À: </b>"jan benadik" <jan.benadik@atos.net><br><b>Cc: </b>users@lists.opennebula.org<br><b>Envoyé: </b>Jeudi 28 Juin 2012 09:13:09<br><b>Objet: </b>Re: [one-users] Apparmor Profile<br><br><style>p { margin: 0; }</style><div style="font-family: Times New Roman; font-size: 12pt; color: #000000">The output is:<br>$apparmor_status<br><br><br>apparmor module is loaded.<br>19 profiles are loaded.<br>19 profiles are in enforce mode.<br> /sbin/dhclient<br> /usr/bin/evince<br> /usr/bin/evince-previewer<br> /usr/bin/evince-previewer//launchpad_integration<br> /usr/bin/evince-previewer//sanitized_helper<br> /usr/bin/evince-thumbnailer<br> /usr/bin/evince-thumbnailer//sanitized_helper<br> /usr/bin/evince//launchpad_integration<br> /usr/bin/evince//sanitized_helper<br> /usr/lib/NetworkManager/nm-dhcp-client.action<br> /usr/lib/connman/scripts/dhclient-script<br> /usr/lib/cups/backend/cups-pdf<br> /usr/lib/libvirt/virt-aa-helper<br> /usr/lib/lightdm/lightdm/lightdm-guest-session-wrapper<br> /usr/lib/telepathy/mission-control-5<br> /usr/lib/telepathy/telepathy-*<br> /usr/sbin/cupsd<br> /usr/sbin/libvirtd<br> /usr/sbin/tcpdump<br>0 profiles are in complain mode.<br>6 processes have profiles defined.<br>0 processes are in enforce mode.<br>0 processes are in complain mode.<br>6 processes are unconfined but have a profile defined.<br> /sbin/dhclient (1098) <br> /sbin/dhclient (4390) <br> /sbin/dhclient (4517) <br> /usr/lib/telepathy/mission-control-5 (2227) <br> /usr/sbin/cupsd (885) <br> /usr/sbin/libvirtd (9276) <br><br><br><br>after <br><br>$/etc/init.d/apparmor teardown<br><br>the output is <br><br><br>apparmor module is loaded.<br>0 profiles are loaded.<br>0 profiles are in enforce mode.<br>0 profiles are in complain mode.<br>0 processes have profiles defined.<br>0 processes are in enforce mode.<br>0 processes are in complain mode.<br>0 processes are unconfined but have a profile defined.<br><br><br><br><br>in the host machine /var/log/libvirt/libvirtd.log shows the following error (after apparmor teardown): <br><br><br>2012-06-27 09:58:00.982+0000: 1134: error : virCommandWait:2192 : internal error Child process (/usr/lib/libvirt/virt-aa-helper -p 0 -c -u libvirt-bda4a47d-e2c4-8e2f-a48c-37c61f98f60a) status unexpected: exit status 1<br>2012-06-27 09:58:00.982+0000: 1134: error : AppArmorGenSecurityLabel:443 : internal error cannot load AppArmor profile 'libvirt-bda4a47d-e2c4-8e2f-a48c-37c61f98f60a<br><br><br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>De: </b>"Jan Benadik" <jan.benadik@atos.net><br><b>À: </b>"Mohamed Mohamed" <mohamed.mohamed@telecom-sudparis.eu><br><b>Cc: </b>users@lists.opennebula.org<br><b>Envoyé: </b>Mercredi 27 Juin 2012 17:32:01<br><b>Objet: </b>Re: [one-users] Apparmor Profile<br><br>
What is output of apparmor_status?<br>
What is changed if unload apparmor?<br>
(/etc/init.d/apparmor teardown)<br>
<br>
Jan<br>
<br>
<br>
<div class="moz-cite-prefix">Dňa 27.06.2012 16:47, Mohamed Mohamed
wrote / napísal(a):<br>
</div>
<blockquote cite="mid:afa99f1e-fcb1-46ff-9d05-b49e9b331e29@zmail110">
<style>p { margin: 0; }</style>
<div style="font-family: Times New Roman; font-size: 12pt; color:
#000000">thank you for your answer,<br>
i did append this line and restart apparmor<br>
but the problem persists.<br>
Mohamed<br>
<br>
<hr id="zwchr">
<div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>De:
</b>"Jan Benadik" <a class="moz-txt-link-rfc2396E" href="mailto:jan.benadik@atos.net" target="_blank"><jan.benadik@atos.net></a><br>
<b>À: </b><a class="moz-txt-link-abbreviated" href="mailto:users@lists.opennebula.org" target="_blank">users@lists.opennebula.org</a><br>
<b>Envoyé: </b>Mercredi 27 Juin 2012 15:55:27<br>
<b>Objet: </b>Re: [one-users] Apparmor Profile<br>
<br>
Hi,<br>
<br>
did you append the line <br>
<br>
/var/lib/one/** lrwk,<br>
<br>
at the end of /etc/apparmor.d/usr.sbin.libvirtd file and
restart apparmor service?<br>
<br>
J.B.<br>
<br>
<div class="moz-cite-prefix">Dňa 27.06.2012 14:25, Mohamed
Mohamed wrote / napísal(a):<br>
</div>
<blockquote cite="mid:f5fa5eb8-5a9b-4ff2-9fdf-4751cc24c06b@zmail110">
<style>p { margin: 0; }</style>
<div style="font-family: Times New Roman; font-size: 12pt;
color: #000000">Hi all,<br>
I installed opennebula 3.6 on ubuntu 12.4TLS,<br>
i added 2 new hosts, i was following the documentation in
opennebula.org.<br>
when i try to submit a new VM the following error
occures:<br>
<br>
<br>
<br>
<pre>Wed Jun 27 14:23:22 2012 [VMM][I]: Successfully execute network driver operation: pre.
Wed Jun 27 14:23:22 2012 [VMM][I]: Command execution fail: cat << EOT | /var/tmp/one/vmm/kvm/deploy /var/lib/one//datastores/0/3/deployment.0 node1 3 node1
Wed Jun 27 14:23:22 2012 [VMM][I]: error: Failed to create domain from /var/lib/one//datastores/0/3/deployment.0
Wed Jun 27 14:23:22 2012 [VMM][I]: error: internal error cannot load AppArmor profile 'libvirt-11995295-92ea-b181-c44c-4fc74b7afe4a'
<span class="vm_log_error">Wed Jun 27 14:23:22 2012 [VMM][E]: Could not create domain from /var/lib/one//datastores/0/3/deployment.0</span>
Wed Jun 27 14:23:22 2012 [VMM][I]: ExitCode: 255
Wed Jun 27 14:23:22 2012 [VMM][I]: Failed to execute virtualization driver operation: deploy.
<span class="vm_log_error">Wed Jun 27 14:23:22 2012 [VMM][E]: Error deploying virtual machine: Could not create domain from /var/lib/one//datastores/0/3/deployment.0</span>
Wed Jun 27 14:23:23 2012 [DiM][I]: New VM state is FAILED</pre>
<br>
<br>
<br>
<br>
does any one have a suggestion?<br>
best regards, <br>
Mohamed.<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<title></title>
<font face="Verdana" color="black" size="3"> <img alt="" src="cid:part3.06020207.02090305@atos.net" height="15" width="252"><br>
<b>Ján Beňadik</b><br>
<font face="Verdana" size="2"> Managed Services - Solution
Design Architect<br>
+421 46 5151 332<br>
+421 903 691 634<br>
<a href="mailto://jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a><br>
Vinohradnícka 6, 971 01 Prievidza<br>
<a href="http://www.sk.atos.net" target="_blank">www.sk.atos.net</a><br>
__________________________________<br>
<br>
<img alt="" src="cid:part6.06030004.02080208@atos.net" height="58" width="261"><br>
</font> </font></div>
<br>
<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a class="moz-txt-link-freetext" href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
</div>
<br>
</div>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<title></title>
<font face="Verdana" color="black" size="3"> <img alt="" src="cid:part7.03040102.05070101@atos.net" height="15" width="252"><br>
<b>Ján Beňadik</b><br>
<font face="Verdana" size="2"> Managed Services - Solution
Design Architect<br>
+421 46 5151 332<br>
+421 903 691 634<br>
<a href="mailto://jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a><br>
Vinohradnícka 6, 971 01 Prievidza<br>
<a href="http://www.sk.atos.net" target="_blank">www.sk.atos.net</a><br>
__________________________________<br>
<br>
<img alt="" src="cid:part10.09090503.03070706@atos.net" height="58" width="261"><br>
</font> </font></div>
<br>
<br>
<br>_______________________________________________<br>Users mailing list<br>Users@lists.opennebula.org<br>http://lists.opennebula.org/listinfo.cgi/users-opennebula.org<br></div><br></div><br>_______________________________________________<br>Users mailing list<br>Users@lists.opennebula.org<br>http://lists.opennebula.org/listinfo.cgi/users-opennebula.org<br></div><br></div></body></html>