Description of problem:
If selinux is set to enforcing, receive the following when attempting to create a vm in virt-manager:
Unable to complete install: 'internal error: process exited while connecting to monitor: /usr/bin/qemu-system-x86_64: error while loading shared libraries: librados.so.2: cannot enable executable stack as shared object requires: Permission denied
'
Traceback (most recent call last):
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 91, in cb_wrapper
callback(asyncjob, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/create.py", line 1787, in do_install
guest.start_install(meter=meter)
File "/usr/share/virt-manager/virtinst/guest.py", line 403, in start_install
noboot)
File "/usr/share/virt-manager/virtinst/guest.py", line 467, in _create_guest
dom = self.conn.createLinux(start_xml or final_xml, 0)
File "/usr/lib64/python2.7/site-packages/libvirt.py", line 3361, in createLinux
if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self)
libvirtError: internal error: process exited while connecting to monitor: /usr/bin/qemu-system-x86_64: error while loading shared libraries: librados.so.2: cannot enable executable stack as shared object requires: Permission denied
Version-Release number of selected component (if applicable):
3.13.1-72.fc21
How reproducible:
Always
Steps to Reproduce:
1. Ensure selinux is enforcing
2. Attempt to create a vm using virt-manager
Actual results:
Dies with the above pypuke
Expected results:
vm installs
Profit
What AVC's are you seeing?
Looks like you need to turn on the virt_use_execmem boolean.
I think we can fix this long term if we just change libvirt to use a different type for containers running with qemu-kvm versus qemu-system