Help with apparmor="DENIED"

Apps and Virtualization
1

Hi all, hopefully my issue is just a novice mistake - please help.

I setup brand new TrueNAS core then proceed to configure pools, datasets, etc - then tried creating a VM and got suck with this error. So, I thought, maybe it’s one of my settings or changes I made and since it’s a brand new config - I just reinstalled TrueNAS from scratch. Then, I tried VM - same errror.

Basically, I’m trying to configure a LInux VM, choosing all the default options, choosing ubuntu-24.04.1-desktop-amd64.iso for installation media. When i start the VM, I get prometd to “install or try Ubuntu” and screen goes blank after that with this in console:

Nov 19 15:39:36 truenas kernel: audit: type=1400 audit(1732048776.772:20): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-54fbe005-0931-4bcd-b9ee-3aaf6134d5fa" pid=414064 comm="apparmor_parser"
Nov 19 15:39:36 truenas kernel: audit: type=1400 audit(1732048776.856:21): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libvirt-54fbe005-0931-4bcd-b9ee-3aaf6134d5fa" pid=414069 comm="apparmor_parser"
Nov 19 15:39:36 truenas kernel: audit: type=1400 audit(1732048776.972:22): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-54fbe005-0931-4bcd-b9ee-3aaf6134d5fa" pid=414088 comm="apparmor_parser"
Nov 19 15:39:36 truenas kernel: tun: Universal TUN/TAP device driver, 1.6
Nov 19 15:39:37 truenas kernel: igc 0000:0f:00.0 ens11: entered promiscuous mode
Nov 19 15:39:42 truenas kernel: audit: type=1400 audit(1732048782.057:23): apparmor="DENIED" operation="open" class="file" profile="libvirt-54fbe005-0931-4bcd-b9ee-3aaf6134d5fa" name="/etc/ssl/openssl.cnf" pid=414093 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=64055 ouid=0
Nov 19 15:39:51 truenas kernel: hrtimer: interrupt took 3434 ns

I’m assuming this is the problem:

truenas kernel: audit: type=1400 audit(1732048782.057:23): apparmor="DENIED" operation="open" class="file" profile="libvirt-54fbe005-0931-4bcd-b9ee-3aaf6134d5fa" name="/etc/ssl/openssl.cnf" pid=414093 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=64055 ouid=0

How do i fix it?

Here is config of my VM (but I’ve tried seemingly every which way combination):

Virtual CPUs: 2
Cores: 4
Threads: 8
Memory Size: 8 GiB
Boot Loader Type: UEFI
System Clock: Local
Display Port: 5900
Description: 24.04.1 LTS for testing
Shutdown Timeout: 20 seconds
2

First of all, add the CORE tag on your original post, if you are on that version. It might help if you post your hardware details and the version of TrueNAS you are on.

1 Like