group.of.nepali.translators team mailing list archive

[ChristianEhrhardt <1559317@xxxxxxxxxxxxxxxxxx>]

I wasn't awake this morning it seems (or did to omuch at once), so I beg
your pardon and resummarize.

Also I had the chance to try the fs forwarding on a zestyl level
libvirt/qemu and it worked fine.

- The /srv/video rule obviously is just the case reported for a share that exports this source.
  That is the actual bug here that a rule for that has to be generated.

On Zesty that seems to work, for a xml entry like the following:
    <filesystem type='mount' accessmode='passthrough'>                           
      <source dir='/home/paelzer/work/libvirt/libvirt-upstream-git-root'/>       
      <target dir='libvirt-git'/>                                                
      <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/>
    </filesystem>
I got generated apparmor rules:
    "/home/paelzer/work/libvirt/libvirt-upstream-git-root/**" rwl,                 
    "/home/paelzer/work/libvirt/libvirt-upstream-git-root/" r,

And it works with rw all the way (sharing a git tree shared between host
and guest).

1. So since this bug is about the rule creation it seems that exists,
needs to be identified and backported for Xenial.

2. about the report by sgofferj this morning I wonder as I have no fowner/fsetid denials.
   Maybe this is specific to exports based on zfs.
   @sgofferj - would you mind opening a new bug for this and attach your guest XML as well as a 
   description of your ZFS setup there? I want to understand and track down your case, but keep 
   it out of this bug here (which is about the source path not added to the rules)

** Also affects: libvirt (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Changed in: libvirt (Ubuntu Xenial)
       Status: New => Confirmed

** Changed in: libvirt (Ubuntu)
       Status: Confirmed => Fix Released

** Changed in: libvirt (Ubuntu Xenial)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1559317

Title:
  [xenial] No write access to VirtFS (9p) in qemu VM run by libvirt

Status in libvirt package in Ubuntu:
  Fix Released
Status in libvirt source package in Xenial:
  Confirmed

Bug description:
  Using virt-manager and libvirtd, I added a VirtFS filesystem
  passthrough to an existing qemu virtual machine also running Ubuntu.

  The XML code generated by libvirt looks like this:

      <filesystem type='mount' accessmode='mapped'>
        <source dir='/p9test'/>
        <target dir='p9_mapped'/>
        <alias name='fs0'/>
        <address type='pci' domain='0x0000' bus='0x02' slot='0x06' function='0x0'/>
      </filesystem>

  Inside the VM, I am able to mount the filesystem passthrough like
  this:

  mount -t 9p -o trans=virtio,version=9p2000.L,rw p9_mapped /mnt

  After mounting, it is possible to read the contents of the
  passthrough, but it is not possible to write into the directory. E.g.
  'touch /mnt/test' results in the error:

  touch: cannot touch ‘/mnt/test’: Permission denied

  Using the other p9 access modes 'passthrough' and 'squash' also does
  not work. Read is possible, write isn't.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: libvirt-bin 1.3.1-1ubuntu6
  ProcVersionSignature: Ubuntu 4.4.0-13.29-generic 4.4.5
  Uname: Linux 4.4.0-13-generic x86_64
  ApportVersion: 2.20-0ubuntu3
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Fri Mar 18 22:12:34 2016
  SourcePackage: libvirt
  UpgradeStatus: Upgraded to xenial on 2016-02-06 (41 days ago)
  modified.conffile..etc.libvirt.qemu.conf: [inaccessible: [Errno 13] Keine Berechtigung: '/etc/libvirt/qemu.conf']
  modified.conffile..etc.libvirt.qemu.networks.default.xml: [inaccessible: [Errno 13] Keine Berechtigung: '/etc/libvirt/qemu/networks/default.xml']

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1559317/+subscriptions