[libvirt-users] libvirt: error : internal error: cannot apply process capabilities -1

Martin Kletzander mkletzan at redhat.com
Fri Apr 11 07:21:02 UTC 2014

On Fri, Apr 11, 2014 at 05:40:25AM +0000, Santhosh Kokala wrote:
>Hi All,
>I am running libvirt-1.1.2 on Scientific Linux release 6.1 (Carbon). I compiled the libvirtd rpms and installed them on to my system. I see this error
>2014-04-11 05:37:42.351+0000: 12378: error : virCommandWait:2348 : internal error: Child process (LC_ALL=C PATH=/sbin:/usr/sbin:/bin:/usr/bin /usr/libexec/qemu-kvm -help) unexpected exit status 1: libvirt:  error : internal error: cannot apply process capabilities -1
>Whenever libvirtd restarts. Because of this error I also cannot create a domain with os_type set to "hvm". Virsh capabilities also does not list this os_type.

This is because we failed to start the process mentioned in the error
message.  Unfortunately, we're not doing much of a debugging in that
area of the code, so there isn't much information to see even if you
have debug messages turned on.

Basically, this means capng_apply(3) failed with -1, but that's all we
know now.  You can try running libvirt under gdb, set breakpoint in
capng_apply and ... see what you can get from that.  Unfortunately
that's all I know about capng, maybe someone else will provide better

The only way this is a bug in libvirt is if we're for example compiled
with libcap-ng that provides PR_CAPBSET_DROP, but the kernel doesn't
somehow.  Otherwise I see no patch changing anything in the capng area
of the code between 1.1.2 and current HEAD.


>Can someone let me if I am missing something obvious?

>libvirt-users mailing list
>libvirt-users at redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20140411/4dd4efba/attachment.sig>

More information about the libvirt-users mailing list