<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=GB2312">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi experts,<br>
<br>
I want to have a test on security driver for libvirt lxc on my
debian system.<br>
What I do is as the following steps:<br>
1) download the source code from git://libvirt.org/libvirt.git<br>
2) compile and install with the source code as following:<br>
./autogen.sh --system <br>
./configure --with-selinux=yes --with-secdriver-selinux=yes<br>
make -j8 & make install<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:root@debian:~/github/libvirt.git/tools#">root@debian:~/github/libvirt.git/tools#</a> ./virsh --version=long<br>
Virsh command line tool of libvirt 1.2.8<br>
See web site at <a class="moz-txt-link-freetext" href="http://libvirt.org/">http://libvirt.org/</a><br>
Compiled with support for:<br>
Hypervisors: QEMU/KVM LXC UML OpenVZ VMWare VirtualBox Test<br>
Networking: Remote Network Bridging Interface udev Nwfilter
VirtualPort<br>
Storage: Dir Filesystem SCSI Multipath LVM<br>
Miscellaneous: Daemon Nodedev SELinux Secrets Debug Modular<br>
<br>
3) then I define a lxc vm with the seclabel :<br>
<meta http-equiv="content-type" content="text/html; charset=GB2312">
root@debian:~/images# vir dumpxml lxc<br>
<domain type='lxc'><br>
<name>lxc</name><br>
<uuid>b1b787a1-d20e-48bd-938b-16ba61d22405</uuid><br>
<memory unit='KiB'>419404</memory><br>
<currentMemory unit='KiB'>419404</currentMemory><br>
<vcpu placement='static'>1</vcpu><br>
<resource><br>
<partition>/machine</partition><br>
</resource><br>
<os><br>
<type arch='x86_64'>exe</type><br>
<init>/sbin/init</init><br>
<cmdline>console=tty0 console=ttyS0</cmdline><br>
</os><br>
<clock offset='utc'/><br>
<on_poweroff>destroy</on_poweroff><br>
<on_reboot>restart</on_reboot><br>
<on_crash>destroy</on_crash><br>
<devices><br>
<emulator>/usr/local/libexec/libvirt_lxc</emulator><br>
<filesystem type='mount' accessmode='passthrough'><br>
<source dir='/tmp/rootfs'/><br>
<target dir='/'/><br>
</filesystem><br>
<console type='pty'><br>
<target type='lxc' port='0'/><br>
</console><br>
</devices><br>
<seclabel type='dynamic' relabel='yes'/><br>
</domain<br>
<br>
4) When I start the vm, It output an error:<br>
root@debian:~/images# vir start lxc<br>
error: Failed to start domain lxc<br>
error: unsupported configuration: Unable to find security driver for
label selinux<br>
<br>
What's the problem? <br>
Really appreciate for any help.<br>
<pre class="moz-signature" cols="72">--
------------
Jackie
Best Regards</pre>
</body>
</html>