Bug 1366485

Summary:	virt-install a lxc container failed when setenforce 1
Product:	Red Hat Enterprise Linux 7	Reporter:	yisun
Component:	libvirt	Assignee:	Pavel Hrdina <phrdina>
Status:	CLOSED NOTABUG	QA Contact:	Virtualization Bugs <virt-bugs>
Severity:	high	Docs Contact:
Priority:	medium
Version:	7.3	CC:	dyuan, rbalakri, xuzhang, yanyang, ydu, yisun
Target Milestone:	rc	Keywords:	Regression
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-09-08 08:57:44 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description yisun 2016-08-12 06:21:40 UTC

description:
virt-install a lxc container failed when setenforce 1

Versions:
virt-install-1.4.0-1.el7.noarch
libvirt-2.0.0-5.el7.x86_64
kernel-3.10.0-483.el7.x86_64
selinux-policy-3.13.1-92.el7.noarch
libselinux-2.5-4.el7.x86_64

How reproducible:
100%

Steps:
1. virt-install a lxc container failed when setenforce 1
# setenforce 1
# virt-install --connect lxc:/// --name avocado-vt-vm1 --ram 500 --noautoconsole
WARNING  No operating system detected, VM performance may suffer. Specify an OS with --os-variant for optimal results.

Starting install...
ERROR    internal error: guest failed to start: Failure in libvirt_lxc startup: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.

Domain installation does not appear to have been successful.
If it was, you can restart your domain by running:
  virsh --connect lxc:/// start avocado-vt-vm1
otherwise, please restart your installation.

2. virt-install a lxc container succeeded when setenforce 0
# setenforce 0
# virt-install --connect lxc:/// --name avocado-vt-vm1 --ram 500 --noautoconsole
WARNING  No operating system detected, VM performance may suffer. Specify an OS with --os-variant for optimal results.

Starting install...
Creating domain...                                                                                                             |    0 B  00:00:00    
Domain creation completed.


Expected result:
lxc container succesfully installed.

Comment 1 yisun 2016-08-26 02:17:32 UTC

Tried with libvirt-1.2.17-13.el7.x86_64, not reproducible, so should be a regression in rhel7.3

Comment 3 Pavel Hrdina 2016-09-07 11:57:33 UTC

Hi, please provide libvirtd log.  I was not able to reproduce this bug.

Comment 4 yisun 2016-09-08 08:50:06 UTC

this bug was reproduced with:
selinux-policy-3.13.1-94.el7.noarch

And it's not reproduced with latest selinux-policy:
selinux-policy-3.13.1-97.el7.noarch

So pls close it.