Permission denied in KVM

No idea if support is made for this but I keep getting this when trying to setup with an ISO in virtmanager.

Installation konnte nicht fertiggestellt werden: «Interner Fehler: process exited while connecting to monitor: 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied»

Traceback (most recent call last):
  File "/app/share/virt-manager/virtManager/asyncjob.py", line 71, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/app/share/virt-manager/virtManager/createvm.py", line 2008, in _do_async_install
    installer.start_install(guest, meter=meter)
  File "/app/share/virt-manager/virtinst/install/installer.py", line 726, in start_install
    domain = self._create_guest(
             ^^^^^^^^^^^^^^^^^^^
  File "/app/share/virt-manager/virtinst/install/installer.py", line 667, in _create_guest
    domain = self.conn.createXML(initial_xml or final_xml, 0)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/lib/python3.12/site-packages/libvirt.py", line 4545, in createXML
    raise libvirtError('virDomainCreateXML() failed')
libvirt.libvirtError: Interner Fehler: process exited while connecting to monitor: 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied

Installation konnte nicht fertiggestellt werden: «Interner Fehler: process exited while connecting to monitor: 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied»

Traceback (most recent call last):
  File "/app/share/virt-manager/virtManager/asyncjob.py", line 71, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/app/share/virt-manager/virtManager/createvm.py", line 2008, in _do_async_install
    installer.start_install(guest, meter=meter)
  File "/app/share/virt-manager/virtinst/install/installer.py", line 726, in start_install
    domain = self._create_guest(
             ^^^^^^^^^^^^^^^^^^^
  File "/app/share/virt-manager/virtinst/install/installer.py", line 667, in _create_guest
    domain = self.conn.createXML(initial_xml or final_xml, 0)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/lib/python3.12/site-packages/libvirt.py", line 4545, in createXML
    raise libvirtError('virDomainCreateXML() failed')
libvirt.libvirtError: Interner Fehler: process exited while connecting to monitor: 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied

I did in fact enable Virtualization, added myself to the libvirt group, install VFIO drivers all via ujust setup-virtualization The folder and iso have read/write permissions for users, groups, and others Would like documentation for this too

11 Replies

rivOP•2mo ago

error found in libvirt is:

Jan 06 10:27:26 redacted libvirtd[1922]: Interner Fehler: QEMU unexpectedly closed the monitor (vm='Bliss-OS'): 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied
Jan 06 10:27:26 redacted libvirtd[1922]: Interner Fehler: process exited while connecting to monitor: 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied

Jan 06 10:27:26 redacted libvirtd[1922]: Interner Fehler: QEMU unexpectedly closed the monitor (vm='Bliss-OS'): 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied
Jan 06 10:27:26 redacted libvirtd[1922]: Interner Fehler: process exited while connecting to monitor: 2025-01-06T09:27:26.203709Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso","node-name":"libvirt-1-storage","read-only":true}: Could not open '/var/home/andre/VM/Bliss-v16.9.7-x86_64-OFFICIAL-gapps-20241011(1).iso': Permission denied

wolfyreload•2mo ago

I got past the first issue by enabling "Allow user Files" in flat seal. But I think I ended up with another issue after

wolfyreload•2mo ago

Also did you reboot after running the ujust script?

rivOP•2mo ago

I already enabled it in flatseal... I did restarts everytime I enabled stuff in the ujust config and I looked around the files and it seems to have been an ownership issue I worked around it by editing /etc/libvirt/qemu.conf and changing the user and group section and then restarting libvertd - but if that's a long term solution I have no idea but my VM is up and running

wolfyreload•2mo ago

Did you run enable, then add your user to the libvirt group (same ujust script)? I recently install on this box want to see if I get the same errors Might need to make a github issue, if I can reproduce

rivOP•2mo ago

yep, i also checked the config file

wolfyreload•2mo ago

I get this when I try and make a Windows VM, also permissions related

Starting vTPM manufacturing as tss:tss @ Mon 06 Jan 2025 12:07:29 PM SAST
Successfully created EK.
  Invoking /usr/bin/swtpm_localca --type ek --ek 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 --dir /tmp/swtpm_setup.certs.WD6IZ2 --logfile /var/log/swtpm/libvirt/qemu/win11-swtpm.log --vmid win11:865e73c6-09d8-4dc6-b8f4-d8b4814abd79 --tpm-spec-family 1.2 --tpm-spec-level 2 --tpm-spec-revision 116 --tpm-manufacturer id:00001014 --tpm-model swtpm --tpm-version id:00740001 --configfile /etc/swtpm-localca.conf --optsfile /etc/swtpm-localca.options
Creating swtpm-localca dir '/var/lib/swtpm-localca'.
Could not create directory for 'statedir': Permission denied
swtpm_localca exit with status 1: 
An error occurred. Authoring the TPM state failed.
Error getting next filename: No child processes
Ending vTPM manufacturing @ Mon 06 Jan 2025 12:07:29 PM SAST

Starting vTPM manufacturing as tss:tss @ Mon 06 Jan 2025 12:07:29 PM SAST
Successfully created EK.
  Invoking /usr/bin/swtpm_localca --type ek --ek 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 --dir /tmp/swtpm_setup.certs.WD6IZ2 --logfile /var/log/swtpm/libvirt/qemu/win11-swtpm.log --vmid win11:865e73c6-09d8-4dc6-b8f4-d8b4814abd79 --tpm-spec-family 1.2 --tpm-spec-level 2 --tpm-spec-revision 116 --tpm-manufacturer id:00001014 --tpm-model swtpm --tpm-version id:00740001 --configfile /etc/swtpm-localca.conf --optsfile /etc/swtpm-localca.options
Creating swtpm-localca dir '/var/lib/swtpm-localca'.
Could not create directory for 'statedir': Permission denied
swtpm_localca exit with status 1: 
An error occurred. Authoring the TPM state failed.
Error getting next filename: No child processes
Ending vTPM manufacturing @ Mon 06 Jan 2025 12:07:29 PM SAST

HikariKnight•2mo ago

Fix for that one is in a pr for testing (unless Kyle merged while I was asleep) if you enable virtualization again

wolfyreload•2mo ago

oh cool. Will test it in a bit then Thanks Hikari

dszxd•4w ago

did you just set the user and group to your user? (change from qemu) I'm seeing the same error you got

rivOP•4w ago

that is how i fixed it yeah

Gaming

Programming

Permission denied in KVM

Did you find this page helpful?