yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #89278
[Bug 1944486] Re: live migration fails with apparmor security driver
[Expired for OpenStack Compute (nova) because there has been no activity
for 60 days.]
** Changed in: nova
Status: Incomplete => Expired
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1944486
Title:
live migration fails with apparmor security driver
Status in OpenStack Compute (nova):
Expired
Bug description:
If the apparmor service is used as the security driver on the source
node, the xml file of the instance will contain the seclabel. When we
perform the operation of instance live migration, nova will require
the target node to use apparmor, otherwise we will get an aborted live
migration.
The xml file:
<seclabel type='dynamic' model='apparmor' relabel='yes'>
<label>libvirt-f07ba7d5-cc3e-4f33-8187-418a121fbf8d</label>
<imagelabel>libvirt-f07ba7d5-cc3e-4f33-8187-418a121fbf8d</imagelabel>
</seclabel>
The ERROR log:
2021-09-18 10:34:36,856.856 13059 ERROR nova.virt.libvirt.driver [req-0064793c-812e-49db-8a48-6e20216c07ed a6a7bea61c2e4bdba3ceccf7ca803c45 0b4d40edb4ab454d93ac783758ab205d - default default] [instance: 8d59e2f0-180f-4835-89fb-f46b258c586b] Live Migration failure: unsupported configuration: Unable to find security driver for model apparmor: libvirtError: unsupported configuration: Unable to find security driver for model apparmor
2021-09-18 10:34:36,886.886 13059 ERROR nova.virt.libvirt.driver [req-0064793c-812e-49db-8a48-6e20216c07ed a6a7bea61c2e4bdba3ceccf7ca803c45 0b4d40edb4ab454d93ac783758ab205d - default default] [instance: 8d59e2f0-180f-4835-89fb-f46b258c586b] Migration operation has aborted
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1944486/+subscriptions
References