Comment 38 for bug 1665698

The change in Openstack is in Ocata only, if you run Ocata on Zesty or Xenial+UCA-Ocata you should be good already with the fix above.

I'm considering to backport it to Yakkety where libvirt is in the broken state (script is handled by libvirt, but it doesn't know about "" being meant to be a no-op). Looking into that somewhen this week.

But I won't backport to Xenial (makes no sense, the code it fixes isn't there at all).
And that means UCA-Newton on Xenial as well won't get a fix as it does not apply.
I'm open to a community driven fix for it in Xenial, but there IMO the override in the apparmor is more likely the right way to do it.

The problem that is left IMHO is that the openstack change from passing 'path=""' to "not passed at all" is suboptimal, as this is "defined" in qemu/libvirt as "fall back to default path". But that fix would have to be in Openstack.