Yes Theodor, please share your apparmor-rules :)
For the moment i am following this guide to disable just the libvirt-apparmor-profile:
http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/Installation_Guide/hypervisor-kvm-install-flow.html#hypervisor-host-install-security-policies "Configure Apparmor (Ubuntu)"
$ sudo ln -s /etc/apparmor.d/usr.sbin.libvirtd /etc/apparmor.d/disable/ $ sudo ln -s /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper /etc/apparmor.d/disable/ $ sudo apparmor_parser -R /etc/apparmor.d/usr.sbin.libvirtd $ sudo apparmor_parser -R /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper
Stop running virtual machines.
$ sudo service apparmor restart $ sudo apparmor_status
Start machines again.
Yes Theodor, please share your apparmor-rules :)
For the moment i am following this guide to disable just the libvirt- apparmor- profile:
http:// cloudstack. apache. org/docs/ en-US/Apache_ CloudStack/ 4.0.2/html/ Installation_ Guide/hyperviso r-kvm-install- flow.html# hypervisor- host-install- security- policies "Configure Apparmor (Ubuntu)"
$ sudo ln -s /etc/apparmor. d/usr.sbin. libvirtd /etc/apparmor. d/disable/ d/usr.lib. libvirt. virt-aa- helper /etc/apparmor. d/disable/ d/usr.sbin. libvirtd d/usr.lib. libvirt. virt-aa- helper
$ sudo ln -s /etc/apparmor.
$ sudo apparmor_parser -R /etc/apparmor.
$ sudo apparmor_parser -R /etc/apparmor.
Stop running virtual machines.
$ sudo service apparmor restart
$ sudo apparmor_status
Start machines again.