Hi Serge, Thanks for taking a look, I got it work around by set 'security_group=None' in /etc/libvirt/qemu.conf, but I am still trying to find a right solution to fix it.
Same error: 2015-10-23 15:40:41.821 DEBUG nova.compute.utils [req-f039b3d1-f34f-4f7e-b983-78d730393e6e admin admin] [instance: b0a88061-45b6-417f-9c99-c6f07c115210] internal error: Process exited prior to exec: libvirt: error : unable to set AppArmor profile 'libvirt-b0a88061-45b6-417f-9c99-c6f07c115210' for '/usr/bin/kvm-spice': No such file or directory from (pid=12748) notify_about_instance_usage /opt/stack/nova/nova/compute/utils.py:284 2015-10-23 15:40:41.822 DEBUG nova.compute.manager [req-f039b3d1-f34f-4f7e-b983-78d730393e6e admin admin] [instance: b0a88061-45b6-417f-9c99-c6f07c115210] Build of instance b0a88061-45b6-417f-9c99-c6f07c115210 was re-scheduled: internal error: Process exited prior to exec: libvirt: error : unable to set AppArmor profile 'libvirt-b0a88061-45b6-417f-9c99-c6f07c115210' for '/usr/bin/kvm-spice': No such file or directory 2015-10-23 15:40:41.432 TRACE nova.compute.manager [instance: b0a88061-45b6-417f-9c99-c6f07c115210] libvirtError: internal error: Process exited prior to exec: libvirt: error : unable to set AppArmor profile 'libvirt-b0a88061-45b6-417f-9c99-c6f07c115210' for '/usr/bin /kvm-spice': No such file or directory -> But actually exists libvirt-b0a88061-45b6-417f-9c99-c6f07c115210: $ sudo ls /etc/apparmor.d/libvirt/libvirt-b0a88061-45b6-417f-9c99-c6f07c115210 libvirt-b0a88061-45b6-417f-9c99-c6f07c115210 libvirt-b0a88061-45b6-417f-9c99-c6f07c115210.files Also I debug on the kvm-spice, it's suspicious got wrong at the last line: exec /usr/bin/qemu-system-x86_64 "${args[@]}" which finally translater into: exec /usr/bin/qemu-system-x86_64 -S -no-user-config -nodefaults -nographic -M none -qmp unix:/var/lib/libvirt/qemu/capabilities.monitor.sock,server,nowait -pidfile /var/lib/libvirt/qemu/capabilities.pidfile -daemonize -> Just guess kvm-spice doesn't have the perssion to access /var/lib/libvirt/qemu $ sudo ls -l /var/lib/libvirt/qemu/ total 16 drwxr-xr-x 3 root root 4096 Oct 10 09:55 channel drwxr-xr-x 2 root root 4096 Oct 9 17:13 dump srwxrwxr-x 1 libvirt-qemu kvm 0 Oct 22 18:22 instance-00000028.monitor srwxrwxr-x 1 libvirt-qemu kvm 0 Oct 22 21:24 instance-00000029.monitor drwxr-xr-x 2 libvirt-qemu kvm 4096 Oct 9 17:13 save drwxr-xr-x 2 libvirt-qemu kvm 4096 Oct 9 17:13 snapshot For the successfully spawned vms work around by setting security_driver to None, there are instance-xxx.monitor created, so I wonder if the problem is kvm-spice has no permission to create the monitor there or someelse. libvirt.log and failed vm qemu.log are attached. Thank you! ** Attachment added: "kvm-spice-error.tar.gz" https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1384532/+attachment/4502945/+files/kvm-spice-error.tar.gz -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1384532 Title: Unable to set AppArmor profile for /usr/bin/kvm-spice To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1384532/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs