[ISSUE] `dnsmasq` not working with `virt-manager`

[ISSUE] `dnsmasq` not working with `virt-manager`

[sisungo]

[-- Attachment #1: Type: text/plain, Size: 981 bytes --]

New issue by sisungo on void-packages repository

https://github.com/void-linux/void-packages/issues/29343

Description:
<!-- Don't request update of package. We have a script for that. https://alpha.de.repo.voidlinux.org/void-updates/void-updates.txt . However, a quality pull request may help. -->
### System

* xuname:  
  Void 5.10.20_1 x86_64-musl GenuineIntel uptodate rFFF
* package:  
  dnsmasq-2.84_1; libvirt-7.1.0_1

### Expected behavior
Created Virtual Machine with open virbr

### Actual behavior
Segfaults on opening virbr:
Failed to start virtual network “default”：internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/bin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 149: Segmentation fault

dnsmasq: lease-init script returned exit code 139


### Steps to reproduce the behavior
 - Create a Virtual Machine by using `virt-manager`

Re: `dnsmasq` not working with `virt-manager`

[sisungo]

[-- Attachment #1: Type: text/plain, Size: 206 bytes --]

New comment by sisungo on void-packages repository

https://github.com/void-linux/void-packages/issues/29343#issuecomment-795295841

Comment:
It works on `apparmor` disabled. Won't it work with `apparmor`?

Re: [ISSUE] [CLOSED] `dnsmasq` not working with `virt-manager`

[sisungo]

[-- Attachment #1: Type: text/plain, Size: 984 bytes --]

Closed issue by sisungo on void-packages repository

https://github.com/void-linux/void-packages/issues/29343

Description:
<!-- Don't request update of package. We have a script for that. https://alpha.de.repo.voidlinux.org/void-updates/void-updates.txt . However, a quality pull request may help. -->
### System

* xuname:  
  Void 5.10.20_1 x86_64-musl GenuineIntel uptodate rFFF
* package:  
  dnsmasq-2.84_1; libvirt-7.1.0_1

### Expected behavior
Created Virtual Machine with open virbr

### Actual behavior
Segfaults on opening virbr:
Failed to start virtual network “default”：internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/bin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 149: Segmentation fault

dnsmasq: lease-init script returned exit code 139


### Steps to reproduce the behavior
 - Create a Virtual Machine by using `virt-manager`

Re: `dnsmasq` not working with `virt-manager`

[FollieHiyuki]

[-- Attachment #1: Type: text/plain, Size: 290 bytes --]

New comment by FollieHiyuki on void-packages repository

https://github.com/void-linux/void-packages/issues/29343#issuecomment-795372791

Comment:
@sisungo I think it has to do with the dnsmasq rules at `/etc/apparmor.d/usr.sbin.dnsmasq`. You can mess with it to see what goes wrong there.

Re: `dnsmasq` not working with `virt-manager`

[noarchwastaken]

[-- Attachment #1: Type: text/plain, Size: 369 bytes --]

New comment by noarchwastaken on void-packages repository

https://github.com/void-linux/void-packages/issues/29343#issuecomment-817024055

Comment:
I just had the same problem today, disabling `/etc/apparmor.d/usr.sbin.dnsmasq` appears to solve the problem.

I suggest that we should reopen this issue, and change the name to indicate that it's related to apparmor.

Re: `dnsmasq` not working with `virt-manager`

[sisungo]

[-- Attachment #1: Type: text/plain, Size: 224 bytes --]

New comment by sisungo on void-packages repository

https://github.com/void-linux/void-packages/issues/29343#issuecomment-817232271

Comment:
This is related to some default AppArmor rules for dnsmasq. This causes segfault.

Re: `dnsmasq` not working with `virt-manager`

[noarchwastaken]

[-- Attachment #1: Type: text/plain, Size: 2661 bytes --]

New comment by noarchwastaken on void-packages repository

https://github.com/void-linux/void-packages/issues/29343#issuecomment-817241386

Comment:
Here are logs when attempting to run `virsh net-start default`:

```
2021-04-11T03:10:50.41915 kern.notice: [ 1406.644349] audit: type=1400 audit(1618110650.417:72): apparmor="DENIED" operation="open" profile="dhcpcd" name="/sys/devices/virtual/net/virbr0/bridge/bridge_id" pid=1472 comm="dhcpcd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2021-04-11T03:10:50.42269 daemon.info: Apr 10 23:10:50 dhcpcd[1472]: virbr0: waiting for carrier
2021-04-11T03:10:50.43948 daemon.info: Apr 10 23:10:50 avahi-daemon[1492]: Joining mDNS multicast group on interface virbr0.IPv4 with address 192.168.122.1.
2021-04-11T03:10:50.43950 daemon.info: Apr 10 23:10:50 avahi-daemon[1492]: New relevant interface virbr0.IPv4 for mDNS.
2021-04-11T03:10:50.43951 daemon.info: Apr 10 23:10:50 avahi-daemon[1492]: Registering new address record for 192.168.122.1 on virbr0.IPv4.
2021-04-11T03:10:50.44354 daemon.info: Apr 10 23:10:50 libvirtd: 2021-04-11 03:10:50.443+0000: 1986: error : virCommandWait:2741 : internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/bin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 149: Segmentation fault
2021-04-11T03:10:50.44355 daemon.info: Apr 10 23:10:50 libvirtd:
2021-04-11T03:10:50.44355 daemon.info: Apr 10 23:10:50 libvirtd: dnsmasq: lease-init script returned exit code 139
2021-04-11T03:10:50.44356 daemon.info: Apr 10 23:10:50 libvirtd:
2021-04-11T03:10:50.44358 daemon.info: Apr 10 23:10:50 avahi-daemon[1492]: Interface virbr0.IPv4 no longer relevant for mDNS.
2021-04-11T03:10:50.44359 daemon.info: Apr 10 23:10:50 avahi-daemon[1492]: Leaving mDNS multicast group on interface virbr0.IPv4 with address 192.168.122.1.
2021-04-11T03:10:50.44416 kern.notice: [ 1406.669217] audit: type=1400 audit(1618110650.442:73): apparmor="DENIED" operation="file_mmap" profile="dnsmasq//libvirt_leaseshelper" name="/usr/libexec/libvirt_leaseshelper" pid=5226 comm="libvirt_leasesh" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
2021-04-11T03:10:50.44431 daemon.info: Apr 10 23:10:50 avahi-daemon[1492]: Withdrawing address record for 192.168.122.1 on virbr0.
2021-04-11T03:10:50.48775 daemon.info: Apr 10 23:10:50 dhcpcd[1472]: virbr0: removing interface
2021-04-11T03:10:50.48909 kern.notice: [ 1406.714344] audit: type=1400 audit(1618110650.487:74): apparmor="DENIED" operation="capable" profile="dhcpcd" pid=1472 comm="dhcpcd" capability=16  capname="sys_module"
```

Re: `dnsmasq` not working with `virt-manager`

[noarchwastaken]

[-- Attachment #1: Type: text/plain, Size: 356 bytes --]

New comment by noarchwastaken on void-packages repository

https://github.com/void-linux/void-packages/issues/29343#issuecomment-817241508

Comment:
I changed line 116 in `/etc/apparmor.d/usr.sbin.dnsmasq` from

```
    /usr/libexec/libvirt_leaseshelper m,
```

to

```
    /usr/libexec/libvirt_leaseshelper mr,
```

and it solved the problem.

Re: [ISSUE] [CLOSED] `dnsmasq` not working with `virt-manager`

[ericonr]

[-- Attachment #1: Type: text/plain, Size: 984 bytes --]

Closed issue by sisungo on void-packages repository

https://github.com/void-linux/void-packages/issues/29343

Description:
<!-- Don't request update of package. We have a script for that. https://alpha.de.repo.voidlinux.org/void-updates/void-updates.txt . However, a quality pull request may help. -->
### System

* xuname:  
  Void 5.10.20_1 x86_64-musl GenuineIntel uptodate rFFF
* package:  
  dnsmasq-2.84_1; libvirt-7.1.0_1

### Expected behavior
Created Virtual Machine with open virbr

### Actual behavior
Segfaults on opening virbr:
Failed to start virtual network “default”：internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/bin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 149: Segmentation fault

dnsmasq: lease-init script returned exit code 139


### Steps to reproduce the behavior
 - Create a Virtual Machine by using `virt-manager`