[Bug 1324393] [NEW] "Force off" fails with "Permission denied" after upgrading to 14.04

[Launchpad Bug Tracker]

You have been subscribed to a public bug:

We have an Ubuntu server (64-bit) that host multiple virtual machines
(mostly Linux).

The server is managed remotely using virt-manager.

Both machines (client and server) were recently upgraded from 13.10 to
14.04.

I noticed that shutting down the VM gets stuck at the state "Powering
off". The VM process on the host does not end: it needs to be killed
with sudo.

Using "Force Off" in virt-manager fails and displays a window with the
following stacktrace:

Error shutting down domain: Failed to terminate process 5170 with
SIGTERM: Permission denied

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 96, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 117, in tmpcb
    callback(*args, **kwargs)
  File "/usr/share/virt-manager/virtManager/domain.py", line 1150, in destroy
    self._backend.destroy()
  File "/usr/lib/python2.7/dist-packages/libvirt.py", line 918, in destroy
    if ret == -1: raise libvirtError ('virDomainDestroy() failed', dom=self)
libvirtError: Failed to terminate process 5170 with SIGTERM: Permission denied

I checked dmesg on the host for suspicious entries. There are a lot of
lines like this:

[575396.447436] type=1400 audit(1400831118.540:4053058): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1375 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-d5ad659b-6ea3-31ee-3680-6f7512b3e7c7"
[575396.447507] type=1400 audit(1400831118.540:4053059): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1375 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-d5ad659b-6ea3-31ee-3680-6f7512b3e7c7"
[575396.449997] type=1400 audit(1400831118.544:4053060): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1372 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-d1be922c-55ee-11e3-bc34-001e4f354ef5"
[575396.450052] type=1400 audit(1400831118.544:4053061): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1372 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-d1be922c-55ee-11e3-bc34-001e4f354ef5"
[575396.472442] type=1400 audit(1400831118.568:4053062): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1372 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-6a3beaf2-5362-11e3-bc34-001e4f354ef5"
[575396.472500] type=1400 audit(1400831118.568:4053063): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1372 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-6a3beaf2-5362-11e3-bc34-001e4f354ef5"
[575396.493703] type=1400 audit(1400831118.588:4053064): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1372 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-2cfb88ea-6bb2-7532-04a5-8be13fcee043"
[575396.493759] type=1400 audit(1400831118.588:4053065): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1372 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-2cfb88ea-6bb2-7532-04a5-8be13fcee043"
[575397.407656] type=1400 audit(1400831119.500:4053066): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1371 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-22ba6354-4ae1-11e3-bc34-001e4f354ef5"
[575397.407734] type=1400 audit(1400831119.500:4053067): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=1371 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-22ba6354-4ae1-11e3-bc34-001e4f354ef5"

When searching for a similar issue, I came across a Fedora bug:
https://bugzilla.redhat.com/show_bug.cgi?id=975065

I am not sure if this is related.

$ lsb_release -rd
Description:	Ubuntu 14.04 LTS
Release:	14.04


virt-manager: 0.9.5-1ubuntu3

** Affects: libvirt (Ubuntu)
     Importance: High
         Status: Invalid

-- 
"Force off" fails with "Permission denied" after upgrading to 14.04
https://bugs.launchpad.net/bugs/1324393
You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to libvirt in Ubuntu.