QA (public) » openQA Project (public)

Observation¶

openQA test in scenario opensuse-Tumbleweed-JeOS-for-AArch64-aarch64-jeos@aarch64_cpu_max-HD20G fails in
bootloader_uefi

Sometimes, we get the following error:

Can't exec "/usr/lib/os-autoinst/script/check_qemu_oom": Permission denied at /usr/lib/os-autoinst/OpenQA/Qemu/Proc.pm line 380.

from audit.log:

openqaworker-arm21:~ # grep 'check_qemu' /var/log/audit/audit.log
type=AVC msg=audit(1737620194.736:8715): apparmor="DENIED" operation="exec" class="file" profile="/usr/share/openqa/script/worker" name="/usr/lib/os-autoinst/script/check_qemu_oom" pid=
4685 comm="/usr/bin/isotov" requested_mask="x" denied_mask="x" fsuid=104 ouid=0
type=AVC msg=audit(1737621599.634:8746): apparmor="DENIED" operation="exec" class="file" profile="/usr/share/openqa/script/worker" name="/usr/lib/os-autoinst/script/check_qemu_oom" pid=
19902 comm="/usr/bin/isotov" requested_mask="x" denied_mask="x" fsuid=104 ouid=0
type=AVC msg=audit(1737622185.843:8767): apparmor="DENIED" operation="exec" class="file" profile="/usr/share/openqa/script/worker" name="/usr/lib/os-autoinst/script/check_qemu_oom" pid=
30202 comm="/usr/bin/isotov" requested_mask="x" denied_mask="x" fsuid=104 ouid=0

Expected result¶

Last good: 20250120 (or more recent)

Further details¶

Always latest result in this scenario: latest

Suggestions¶

• DONE Could be the script not being executable, nope we checked filesystem level permissions
• DONE Likely this is related to apparmor profiles. Check the audit log
• Check why apparmor profiles don't cover on this host. Either it's not properly deployed there or missing in general in our profiles