Deploy v0.50.0 kubevirt failed due to "failed to get emulator capabilities"

[晔张]

Hi everyone:

     I tried to deploy v0.50.0 kubevirt on k8s(kubeadm=1.23.3), but the virt-handler struck in the Init:CrashLoopBackOff status. 

     

     docker logs -f {the exited container} I got the error msg as below:

error: failed to get emulator capabilities
error: internal error: Failed to start QEMU binary /usr/libexec/qemu-kvm for probing: libvirt:  error : cannot execute binary /usr/libexec/qemu-kvm: Permission denied

    I search for the error message but didn't a solution.  So what possibly could be the problem here?

   

    Thanks,

     Dante Zhang

[Cohen, Tal4]

I think you have AppArmor enabled. Try add above line to "/etc/apparmor.d/usr.sbin.libvirtd  and reload appArmor or reboot

 

 

virtiofs_apparmor_file: "/etc/apparmor.d/usr.sbin.libvirtd"

 

virtiofs_apparmor_line1: "# Habana K8S"

virtiofs_apparmor_line2: "/usr/libexec/qemu-kvm PUx,"

virtiofs_apparmor_line3: "/usr/libexec/virtiofsd PUx,"

virtiofs_apparmor_line4: "/usr/bin/kvm PUx,"

--
You received this message because you are subscribed to the Google Groups "kubevirt-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to kubevirt-dev...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/kubevirt-dev/b5ec1bca-a91a-4731-9f37-2611055ecd4fn%40googlegroups.com.

---------------------------------------------------------------------
Intel Israel (74) Limited

This e-mail and any attachments may contain confidential material for
the sole use of the intended recipient(s). Any review or distribution
by others is strictly prohibited. If you are not the intended
recipient, please contact the sender and delete all copies.

[Fabian Deutsch]

Heya,

if this is the casee … how can kubevirt better communicate such a known problem?

To view this discussion on the web visit https://groups.google.com/d/msgid/kubevirt-dev/CY4PR11MB1736E91C57869FCC94F10F92C3359%40CY4PR11MB1736.namprd11.prod.outlook.com.

[晔张]

Thanks, Cohen. It works now.

To view this discussion on the web visit https://groups.google.com/d/msgid/kubevirt-dev/CY4PR11MB1736E91C57869FCC94F10F92C3359%40CY4PR11MB1736.namprd11.prod.outlook.com.