Networking problems after update to snap version 16530

LXD
1

Hello all,

Was wondering if anyone has seen networking suddenly break when LXD 4.4 (revision 16530) installs? I was working this morning with my containers and everything was hunky-dory, left for a few hours, came back, and suddenly none of the containers were able to ping out to sites on the internet. Doing some sleuthing, the change that looks to be the problem was the snap getting updated to 4.4

I tried to revert the lxd snap back in order to test, but doing so broke the snap completely for some reason and it wouldn’t run. So I restored the system quickly, and did some other fiddling but to no avail. My next thing to try to is to remove lxd completely and reinstall it.

When I start a container now, lxc list doesn’t even show an IP for the container.

+-----------+---------+------+------+-----------+-----------+
| appbox2   | RUNNING |      |      | CONTAINER | 0         |
+-----------+---------+------+------+-----------+-----------+

lxc network list looks as expected

+-----------+----------+---------+----------------+---------------------------+-------------+---------+
|   NAME    |   TYPE   | MANAGED |      IPV4      |           IPV6            | DESCRIPTION | USED BY |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+
| bridge0   | bridge   | NO      |                |                           |             | 0       |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+
| enp57s0f1 | physical | NO      |                |                           |             | 0       |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+
| lxcbr0    | bridge   | NO      |                |                           |             | 0       |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+
| lxdbr0    | bridge   | YES     | 10.60.163.1/24 | fd42:d9c2:c4ab:e0ac::1/64 |             | 7       |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+
| virbr0    | bridge   | NO      |                |                           |             | 0       |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+
| wlp0s20f3 | physical | NO      |                |                           |             | 0       |
+-----------+----------+---------+----------------+---------------------------+-------------+---------+

and lxc network show lxdbr0 doesn’t seem weird to me at first glance:

config:
  ipv4.address: 10.60.163.1/24
  ipv4.nat: "true"
  ipv6.address: fd42:d9c2:c4ab:e0ac::1/64
  ipv6.nat: "true"
description: ""
name: lxdbr0
type: bridge
used_by:
- /1.0/instances/appbox1
- /1.0/instances/appbox2
- /1.0/instances/crossover
- /1.0/instances/dev-dwk
- /1.0/instances/dev-ppe
- /1.0/instances/xnerds
- /1.0/profiles/default
managed: true
status: Created
locations:
- none

Anybody else seen something similar or have any ideas?

2

So, tried blowing away the snap and all data, and reinstalling. From a fresh install, the test container immediately shows that something is amiss with networking.

+------+---------+------+------+-----------+-----------+
| NAME |  STATE  | IPV4 | IPV6 |   TYPE    | SNAPSHOTS |
+------+---------+------+------+-----------+-----------+
| test | RUNNING |      |      | CONTAINER | 0         |
+------+---------+------+------+-----------+-----------+

From withing the container, attempting to update or do anything that talks to the outside fails.

3

Can you show ps aux | grep dnsmasq as well as grep -i apparmor /var/log/kern.log?

4

Also, nft list ruleset and iptables -L -n -v may be helpful

5

ps aux | grep dnsmasq

libvirt+    2282  0.0  0.0   9228  2104 ?        S    22:28   0:00 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper
root        2283  0.0  0.0   9200   332 ?        S    22:28   0:00 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/lib/libvirt/libvirt_leaseshelper
lxc-dns+    3682  0.0  0.0  24536   352 ?        S    22:29   0:00 dnsmasq -u lxc-dnsmasq --strict-order --bind-interfaces --pid-file=/run/lxc/dnsmasq.pid --listen-address 10.0.3.1 --dhcp-range 10.0.3.2,10.0.3.254 --dhcp-lease-max=253 --dhcp-no-override --except-interface=lo --interface=lxcbr0 --dhcp-leasefile=/var/lib/misc/dnsmasq.lxcbr0.leases --dhcp-authoritative
toochev+    6210  0.0  0.0  18800  2696 pts/3    S+   22:32   0:00 grep --color=auto dnsmasq

sudo nft list ruleset

table bridge filter {
        chain INPUT {
                type filter hook input priority filter; policy accept;
        }

        chain FORWARD {
                type filter hook forward priority filter; policy accept;
        }

        chain OUTPUT {
                type filter hook output priority filter; policy accept;
        }
}

iptables -L -n -v

Chain INPUT (policy ACCEPT 33336 packets, 386M bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  lxdbr0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53 /* generated for LXD network lxdbr0 */
    0     0 ACCEPT     udp  --  lxdbr0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:53 /* generated for LXD network lxdbr0 */
   23  7256 ACCEPT     udp  --  lxdbr0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:67 /* generated for LXD network lxdbr0 */
    0     0 ACCEPT     tcp  --  lxcbr0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53
    0     0 ACCEPT     udp  --  lxcbr0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:53
    0     0 ACCEPT     tcp  --  lxcbr0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:67
    0     0 ACCEPT     udp  --  lxcbr0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:67
33824  386M LIBVIRT_INP  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      lxdbr0  0.0.0.0/0            0.0.0.0/0            /* generated for LXD network lxdbr0 */
    0     0 ACCEPT     all  --  lxdbr0 *       0.0.0.0/0            0.0.0.0/0            /* generated for LXD network lxdbr0 */
    0     0 ACCEPT     all  --  *      lxcbr0  0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     all  --  lxcbr0 *       0.0.0.0/0            0.0.0.0/0           
    0     0 LIBVIRT_FWX  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LIBVIRT_FWI  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 LIBVIRT_FWO  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 30167 packets, 4859K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     tcp  --  *      lxdbr0  0.0.0.0/0            0.0.0.0/0            tcp spt:53 /* generated for LXD network lxdbr0 */
    0     0 ACCEPT     udp  --  *      lxdbr0  0.0.0.0/0            0.0.0.0/0            udp spt:53 /* generated for LXD network lxdbr0 */
    0     0 ACCEPT     udp  --  *      lxdbr0  0.0.0.0/0            0.0.0.0/0            udp spt:67 /* generated for LXD network lxdbr0 */
30700 5016K LIBVIRT_OUT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain LIBVIRT_FWI (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      virbr0  0.0.0.0/0            192.168.122.0/24     ctstate RELATED,ESTABLISHED
    0     0 REJECT     all  --  *      virbr0  0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable

Chain LIBVIRT_FWO (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  virbr0 *       192.168.122.0/24     0.0.0.0/0           
    0     0 REJECT     all  --  virbr0 *       0.0.0.0/0            0.0.0.0/0            reject-with icmp-port-unreachable

Chain LIBVIRT_FWX (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  virbr0 virbr0  0.0.0.0/0            0.0.0.0/0           

Chain LIBVIRT_INP (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  virbr0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:53
    0     0 ACCEPT     tcp  --  virbr0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:53
    0     0 ACCEPT     udp  --  virbr0 *       0.0.0.0/0            0.0.0.0/0            udp dpt:67
    0     0 ACCEPT     tcp  --  virbr0 *       0.0.0.0/0            0.0.0.0/0            tcp dpt:67

Chain LIBVIRT_OUT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  *      virbr0  0.0.0.0/0            0.0.0.0/0            udp dpt:53
    0     0 ACCEPT     tcp  --  *      virbr0  0.0.0.0/0            0.0.0.0/0            tcp dpt:53
    0     0 ACCEPT     udp  --  *      virbr0  0.0.0.0/0            0.0.0.0/0            udp dpt:68
    0     0 ACCEPT     tcp  --  *      virbr0  0.0.0.0/0            0.0.0.0/0            tcp dpt:68

grep -i apparmor /var/log/kern.log

Aug  3 22:17:05 cobalt kernel: [   70.785841] audit: type=1400 audit(1596507425.582:85): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=3676 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:17:05 cobalt kernel: [   70.788114] audit: type=1400 audit(1596507425.586:86): apparmor="DENIED" operation="open" profile="snap.lxd.lxd" name="/etc/pop-os/os-release" pid=3676 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:17:06 cobalt kernel: [   71.446320] audit: type=1400 audit(1596507426.242:87): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=3717 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:17:06 cobalt kernel: [   71.447928] audit: type=1400 audit(1596507426.242:88): apparmor="DENIED" operation="open" profile="snap.lxd.daemon" name="/etc/pop-os/os-release" pid=3717 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:17:06 cobalt kernel: [   71.726007] audit: type=1400 audit(1596507426.522:89): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/lxc-start" pid=3860 comm="apparmor_parser"
Aug  3 22:17:06 cobalt kernel: [   71.742270] audit: type=1400 audit(1596507426.538:90): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default" pid=3870 comm="apparmor_parser"
Aug  3 22:17:06 cobalt kernel: [   71.742273] audit: type=1400 audit(1596507426.538:91): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-cgns" pid=3870 comm="apparmor_parser"
Aug  3 22:17:06 cobalt kernel: [   71.742275] audit: type=1400 audit(1596507426.538:92): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-with-mounting" pid=3870 comm="apparmor_parser"
Aug  3 22:17:06 cobalt kernel: [   71.742277] audit: type=1400 audit(1596507426.538:93): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-with-nesting" pid=3870 comm="apparmor_parser"
Aug  3 22:18:17 cobalt kernel: [  142.849036] audit: type=1400 audit(1596507497.604:94): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lxd_dnsmasq-lxdbr1_</var/snap/lxd/common/lxd>" pid=4195 comm="apparmor_parser"
Aug  3 22:18:17 cobalt kernel: [  142.851939] audit: type=1400 audit(1596507497.608:95): apparmor="DENIED" operation="open" profile="lxd_dnsmasq-lxdbr1_</var/snap/lxd/common/lxd>" name="/home/lxd/common/lxd/networks/lxdbr1/dnsmasq.raw" pid=4202 comm="dnsmasq" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:28 cobalt kernel: [  153.518786] audit: type=1400 audit(1596507508.274:96): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4278 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:28 cobalt kernel: [  153.521081] audit: type=1400 audit(1596507508.278:97): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4278 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.674896] audit: type=1400 audit(1596507511.430:98): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4321 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.676969] audit: type=1400 audit(1596507511.434:99): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4321 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.725705] audit: type=1400 audit(1596507511.482:100): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4357 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.727379] audit: type=1400 audit(1596507511.482:101): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4357 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.766407] audit: type=1400 audit(1596507511.522:102): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4391 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.768139] audit: type=1400 audit(1596507511.526:103): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4391 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.801234] audit: type=1400 audit(1596507511.558:104): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4426 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:31 cobalt kernel: [  156.802791] audit: type=1400 audit(1596507511.558:105): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4426 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:18:44 cobalt kernel: [  169.838538] audit: type=1400 audit(1596507524.600:108): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4496 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:18:44 cobalt kernel: [  169.840611] audit: type=1400 audit(1596507524.600:109): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4496 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:22:22 cobalt kernel: [  387.889345] audit: type=1400 audit(1596507742.629:110): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=6129 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:22:22 cobalt kernel: [  387.889512] audit: type=1400 audit(1596507742.629:111): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=6129 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:22:22 cobalt kernel: [  387.904717] audit: type=1400 audit(1596507742.645:112): apparmor="DENIED" operation="open" profile="snap-update-ns.chromium" name="/etc/pop-os/os-release" pid=6179 comm="5" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:22:22 cobalt kernel: [  387.938439] audit: type=1400 audit(1596507742.677:113): apparmor="DENIED" operation="open" profile="snap-update-ns.chromium" name="/etc/pop-os/os-release" pid=6186 comm="5" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:22:22 cobalt kernel: [  387.946584] audit: type=1400 audit(1596507742.685:114): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/etc/pop-os/os-release" pid=6129 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:22:22 cobalt kernel: [  388.059077] audit: type=1400 audit(1596507742.797:115): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/home/toochevere/.Public/" pid=6243 comm="head" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug  3 22:22:22 cobalt kernel: [  388.204491] audit: type=1400 audit(1596507742.945:116): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/etc/pop-os/os-release" pid=6277 comm="snapctl" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:22:36 cobalt kernel: [  401.645270] audit: type=1400 audit(1596507756.388:189): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/etc/pop-os/os-release" pid=6129 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:22:36 cobalt kernel: [  401.667108] audit: type=1400 audit(1596507756.408:190): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/run/udev/data/+thunderbolt:domain0" pid=6129 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:22:36 cobalt kernel: [  401.667201] audit: type=1400 audit(1596507756.408:191): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/run/udev/data/+thunderbolt:0-0" pid=6129 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:23:30 cobalt kernel: [  455.550711] audit: type=1400 audit(1596507810.286:192): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=7982 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.377397] audit: type=1400 audit(1596507811.114:193): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=8135 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.390961] audit: type=1400 audit(1596507811.126:194): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe" pid=8136 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.391654] audit: type=1400 audit(1596507811.126:195): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe//kmod" pid=8136 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.457787] audit: type=1400 audit(1596507811.194:196): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/bin/man" pid=8138 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.458199] audit: type=1400 audit(1596507811.194:197): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="man_filter" pid=8138 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.458614] audit: type=1400 audit(1596507811.194:198): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="man_groff" pid=8138 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.512605] audit: type=1400 audit(1596507811.250:199): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/sbin/tcpdump" pid=8141 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.649714] audit: type=1400 audit(1596507811.386:200): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=8137 comm="apparmor_parser"
Aug  3 22:23:31 cobalt kernel: [  456.650115] audit: type=1400 audit(1596507811.386:201): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=8137 comm="apparmor_parser"
Aug  3 22:23:50 cobalt kernel: [  475.854268] audit: type=1400 audit(1596507830.593:206): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8311 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:23:50 cobalt kernel: [  475.856929] audit: type=1400 audit(1596507830.597:207): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8311 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:23:52 cobalt kernel: [  477.484705] audit: type=1400 audit(1596507832.221:208): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8870 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:23:52 cobalt kernel: [  477.487385] audit: type=1400 audit(1596507832.225:209): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8870 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:23:52 cobalt kernel: [  477.564597] audit: type=1400 audit(1596507832.301:210): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8903 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:23:52 cobalt kernel: [  477.566852] audit: type=1400 audit(1596507832.305:211): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8903 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:23:52 cobalt kernel: [  477.768894] audit: type=1400 audit(1596507832.509:212): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=8994 comm="apparmor_parser"
Aug  3 22:23:53 cobalt kernel: [  478.437843] audit: type=1400 audit(1596507833.177:213): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=9132 comm="apparmor_parser"
Aug  3 22:23:53 cobalt kernel: [  478.438171] audit: type=1400 audit(1596507833.177:214): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe" pid=9133 comm="apparmor_parser"
Aug  3 22:23:53 cobalt kernel: [  478.438175] audit: type=1400 audit(1596507833.177:215): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe//kmod" pid=9133 comm="apparmor_parser"
Aug  3 22:24:02 cobalt kernel: [  488.087383] audit: type=1400 audit(1596507842.824:226): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9209 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:02 cobalt kernel: [  488.090094] audit: type=1400 audit(1596507842.828:227): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9209 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:02 cobalt kernel: [  488.144717] audit: type=1400 audit(1596507842.880:228): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9251 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:02 cobalt kernel: [  488.146511] audit: type=1400 audit(1596507842.884:229): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9251 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:03 cobalt kernel: [  488.898406] audit: type=1400 audit(1596507843.636:230): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9410 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:03 cobalt kernel: [  488.900311] audit: type=1400 audit(1596507843.636:231): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9410 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:13 cobalt kernel: [  499.028460] audit: type=1400 audit(1596507853.764:232): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9508 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:13 cobalt kernel: [  499.030683] audit: type=1400 audit(1596507853.768:233): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9508 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:15 cobalt kernel: [  500.304171] audit: type=1400 audit(1596507855.040:234): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10052 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:15 cobalt kernel: [  500.309743] audit: type=1400 audit(1596507855.048:235): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10052 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:15 cobalt kernel: [  500.371541] audit: type=1400 audit(1596507855.108:236): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10086 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:15 cobalt kernel: [  500.373559] audit: type=1400 audit(1596507855.112:237): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10086 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:15 cobalt kernel: [  500.572765] audit: type=1400 audit(1596507855.308:238): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=10174 comm="apparmor_parser"
Aug  3 22:24:15 cobalt kernel: [  501.027327] audit: type=1400 audit(1596507855.764:239): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=10297 comm="apparmor_parser"
Aug  3 22:24:15 cobalt kernel: [  501.029221] audit: type=1400 audit(1596507855.764:240): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/sbin/tcpdump" pid=10303 comm="apparmor_parser"
Aug  3 22:24:15 cobalt kernel: [  501.030221] audit: type=1400 audit(1596507855.768:241): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe" pid=10298 comm="apparmor_parser"
Aug  3 22:24:22 cobalt kernel: [  508.156674] audit: type=1400 audit(1596507862.892:252): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10394 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:22 cobalt kernel: [  508.158444] audit: type=1400 audit(1596507862.896:253): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10394 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:24:41 cobalt kernel: [  526.461095] audit: type=1400 audit(1596507881.196:254): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10674 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:41 cobalt kernel: [  526.463269] audit: type=1400 audit(1596507881.200:255): apparmor="DENIED" operation="open" profile="snap.lxd.daemon" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10674 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:43 cobalt kernel: [  529.094930] audit: type=1400 audit(1596507883.832:256): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10820 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:43 cobalt kernel: [  529.097012] audit: type=1400 audit(1596507883.832:257): apparmor="DENIED" operation="open" profile="snap.lxd.hook.remove" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10820 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:24:44 cobalt kernel: [  529.812661] audit: type=1400 audit(1596507884.548:258): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.check-kernel" pid=10929 comm="apparmor_parser"
Aug  3 22:24:44 cobalt kernel: [  529.816587] audit: type=1400 audit(1596507884.552:259): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.benchmark" pid=10927 comm="apparmor_parser"
Aug  3 22:24:44 cobalt kernel: [  529.817249] audit: type=1400 audit(1596507884.552:260): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.buginfo" pid=10928 comm="apparmor_parser"
Aug  3 22:24:44 cobalt kernel: [  529.818305] audit: type=1400 audit(1596507884.556:261): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.hook.install" pid=10932 comm="apparmor_parser"
Aug  3 22:24:44 cobalt kernel: [  529.818686] audit: type=1400 audit(1596507884.556:262): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.hook.remove" pid=10933 comm="apparmor_parser"
Aug  3 22:24:44 cobalt kernel: [  529.820440] audit: type=1400 audit(1596507884.556:263): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.activate" pid=10926 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.625612] audit: type=1400 audit(1596507886.364:309): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.check-kernel" pid=11100 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.627364] audit: type=1400 audit(1596507886.364:310): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.activate" pid=11097 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.635189] audit: type=1400 audit(1596507886.372:311): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.hook.remove" pid=11102 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.636834] audit: type=1400 audit(1596507886.372:312): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.daemon" pid=11101 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.641081] audit: type=1400 audit(1596507886.376:313): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.lxc" pid=11103 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.642634] audit: type=1400 audit(1596507886.380:314): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.lxc-to-lxd" pid=11104 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.644962] audit: type=1400 audit(1596507886.380:315): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.benchmark" pid=11098 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.657229] audit: type=1400 audit(1596507886.392:316): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.buginfo" pid=11099 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.703039] audit: type=1400 audit(1596507886.440:317): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.lxd" pid=11105 comm="apparmor_parser"
Aug  3 22:24:46 cobalt kernel: [  531.703720] audit: type=1400 audit(1596507886.440:318): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.lxd.migrate" pid=11106 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.084407] audit: type=1400 audit(1596508007.824:326): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap-update-ns.lxd" pid=12147 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.210676] audit: type=1400 audit(1596508007.952:327): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.activate" pid=12148 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.211557] audit: type=1400 audit(1596508007.952:328): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.check-kernel" pid=12151 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.211657] audit: type=1400 audit(1596508007.952:329): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.hook.configure" pid=12153 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.222218] audit: type=1400 audit(1596508007.964:330): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.buginfo" pid=12150 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.223102] audit: type=1400 audit(1596508007.964:331): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.benchmark" pid=12149 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.225129] audit: type=1400 audit(1596508007.964:332): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.hook.install" pid=12154 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.228249] audit: type=1400 audit(1596508007.968:333): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.daemon" pid=12152 comm="apparmor_parser"
Aug  3 22:26:47 cobalt kernel: [  653.246074] audit: type=1400 audit(1596508007.988:334): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.hook.remove" pid=12155 comm="apparmor_parser"
Aug  3 22:26:48 cobalt kernel: [  653.285157] audit: type=1400 audit(1596508008.024:335): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="snap.lxd.migrate" pid=12161 comm="apparmor_parser"
Aug  3 22:27:47 cobalt kernel: [  712.834583] audit: type=1400 audit(1596508067.577:377): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=12839 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:27:47 cobalt kernel: [  712.836613] audit: type=1400 audit(1596508067.577:378): apparmor="DENIED" operation="open" profile="snap.lxd.lxd" name="/etc/pop-os/os-release" pid=12839 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:28:51 cobalt kernel: [    0.321412] AppArmor: AppArmor initialized
Aug  3 22:28:51 cobalt kernel: [    0.683224] AppArmor: AppArmor Filesystem Enabled
Aug  3 22:28:51 cobalt kernel: [    1.687563] AppArmor: AppArmor sha1 policy hashing enabled
Aug  3 22:28:51 cobalt kernel: [    1.689147] evm: security.apparmor
Aug  3 22:28:51 cobalt kernel: [   40.850600] audit: type=1400 audit(1596508130.653:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirtd" pid=1637 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.850603] audit: type=1400 audit(1596508130.653:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirtd//qemu_bridge_helper" pid=1637 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.851078] audit: type=1400 audit(1596508130.657:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/haveged" pid=1638 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.852003] audit: type=1400 audit(1596508130.657:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="ippusbxd" pid=1639 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.852445] audit: type=1400 audit(1596508130.657:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="virt-aa-helper" pid=1635 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.854102] audit: type=1400 audit(1596508130.657:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/lxc-start" pid=1641 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.855837] audit: type=1400 audit(1596508130.661:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=1633 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.860716] audit: type=1400 audit(1596508130.665:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=1645 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.860719] audit: type=1400 audit(1596508130.665:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=1645 comm="apparmor_parser"
Aug  3 22:28:51 cobalt kernel: [   40.860722] audit: type=1400 audit(1596508130.665:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=1645 comm="apparmor_parser"
Aug  3 22:29:21 cobalt kernel: [   71.666246] audit: type=1400 audit(1596508161.469:85): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="/usr/bin/lxc-start" pid=3692 comm="apparmor_parser"
Aug  3 22:29:21 cobalt kernel: [   71.685771] audit: type=1400 audit(1596508161.489:86): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default" pid=3701 comm="apparmor_parser"
Aug  3 22:29:21 cobalt kernel: [   71.685775] audit: type=1400 audit(1596508161.489:87): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-cgns" pid=3701 comm="apparmor_parser"
Aug  3 22:29:21 cobalt kernel: [   71.685777] audit: type=1400 audit(1596508161.489:88): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-with-mounting" pid=3701 comm="apparmor_parser"
Aug  3 22:29:21 cobalt kernel: [   71.685779] audit: type=1400 audit(1596508161.489:89): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxc-container-default-with-nesting" pid=3701 comm="apparmor_parser"
Aug  3 22:29:22 cobalt kernel: [   72.990470] audit: type=1400 audit(1596508162.776:90): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=3743 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:29:22 cobalt kernel: [   72.992333] audit: type=1400 audit(1596508162.776:91): apparmor="DENIED" operation="open" profile="snap.lxd.lxd" name="/etc/pop-os/os-release" pid=3743 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:29:23 cobalt kernel: [   73.641860] audit: type=1400 audit(1596508163.411:92): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=3784 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:29:23 cobalt kernel: [   73.643936] audit: type=1400 audit(1596508163.411:93): apparmor="DENIED" operation="open" profile="snap.lxd.daemon" name="/etc/pop-os/os-release" pid=3784 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:13 cobalt kernel: [  123.754891] audit: type=1400 audit(1596508213.357:94): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lxd_dnsmasq-lxdbr0_</var/snap/lxd/common/lxd>" pid=4165 comm="apparmor_parser"
Aug  3 22:30:13 cobalt kernel: [  123.758085] audit: type=1400 audit(1596508213.357:95): apparmor="DENIED" operation="open" profile="lxd_dnsmasq-lxdbr0_</var/snap/lxd/common/lxd>" name="/home/lxd/common/lxd/networks/lxdbr0/dnsmasq.raw" pid=4169 comm="dnsmasq" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:32 cobalt kernel: [  143.184459] audit: type=1400 audit(1596508232.790:96): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4248 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:32 cobalt kernel: [  143.186696] audit: type=1400 audit(1596508232.794:97): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4248 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:35 cobalt kernel: [  146.368440] audit: type=1400 audit(1596508235.975:98): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4291 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:35 cobalt kernel: [  146.370502] audit: type=1400 audit(1596508235.979:99): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4291 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:36 cobalt kernel: [  146.418109] audit: type=1400 audit(1596508236.027:100): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4326 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:36 cobalt kernel: [  146.419758] audit: type=1400 audit(1596508236.027:101): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4326 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:36 cobalt kernel: [  146.460410] audit: type=1400 audit(1596508236.067:102): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4361 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:36 cobalt kernel: [  146.461945] audit: type=1400 audit(1596508236.071:103): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4361 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:36 cobalt kernel: [  146.494546] audit: type=1400 audit(1596508236.103:104): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4395 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:36 cobalt kernel: [  146.496195] audit: type=1400 audit(1596508236.103:105): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4395 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:42 cobalt kernel: [  152.628635] audit: type=1400 audit(1596508242.240:108): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4462 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:42 cobalt kernel: [  152.630971] audit: type=1400 audit(1596508242.240:109): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4462 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:53 cobalt kernel: [  163.923771] audit: type=1400 audit(1596508253.534:110): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4497 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:53 cobalt kernel: [  163.925891] audit: type=1400 audit(1596508253.534:111): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=4497 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:59 cobalt kernel: [  170.033005] audit: type=1400 audit(1596508259.642:112): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4554 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:59 cobalt kernel: [  170.033256] audit: type=1400 audit(1596508259.642:113): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=4554 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:59 cobalt kernel: [  170.044430] audit: type=1400 audit(1596508259.654:114): apparmor="DENIED" operation="open" profile="snap-update-ns.chromium" name="/etc/pop-os/os-release" pid=4605 comm="5" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:30:59 cobalt kernel: [  170.074068] audit: type=1400 audit(1596508259.682:115): apparmor="DENIED" operation="open" profile="snap-update-ns.chromium" name="/etc/pop-os/os-release" pid=4612 comm="5" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:59 cobalt kernel: [  170.082083] audit: type=1400 audit(1596508259.690:116): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/etc/pop-os/os-release" pid=4554 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:30:59 cobalt kernel: [  170.189630] audit: type=1400 audit(1596508259.798:117): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/home/toochevere/.Public/" pid=4668 comm="head" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Aug  3 22:30:59 cobalt kernel: [  170.334781] audit: type=1400 audit(1596508259.945:118): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/etc/pop-os/os-release" pid=4702 comm="snapctl" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:31:14 cobalt kernel: [  185.058321] audit: type=1400 audit(1596508274.659:191): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/etc/pop-os/os-release" pid=4554 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:31:14 cobalt kernel: [  185.081734] audit: type=1400 audit(1596508274.683:192): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/run/udev/data/+thunderbolt:domain0" pid=4554 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:31:14 cobalt kernel: [  185.081833] audit: type=1400 audit(1596508274.683:193): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/run/udev/data/+thunderbolt:0-0" pid=4554 comm="ThreadPoolForeg" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:32:20 cobalt kernel: [  251.155077] audit: type=1400 audit(1596508340.740:194): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=6417 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  251.976032] audit: type=1400 audit(1596508341.560:195): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=6574 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  251.996414] audit: type=1400 audit(1596508341.584:196): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe" pid=6575 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  251.996902] audit: type=1400 audit(1596508341.584:197): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe//kmod" pid=6575 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  252.030150] audit: type=1400 audit(1596508341.616:198): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/bin/man" pid=6577 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  252.030641] audit: type=1400 audit(1596508341.616:199): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="man_filter" pid=6577 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  252.031014] audit: type=1400 audit(1596508341.616:200): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="man_groff" pid=6577 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  252.089958] audit: type=1400 audit(1596508341.676:201): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/sbin/tcpdump" pid=6580 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  252.188066] audit: type=1400 audit(1596508341.772:202): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=6576 comm="apparmor_parser"
Aug  3 22:32:21 cobalt kernel: [  252.188543] audit: type=1400 audit(1596508341.776:203): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=6576 comm="apparmor_parser"
Aug  3 22:32:40 cobalt kernel: [  271.400155] audit: type=1400 audit(1596508360.983:208): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=6709 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:32:40 cobalt kernel: [  271.401876] audit: type=1400 audit(1596508360.987:209): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=6709 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:32:42 cobalt kernel: [  272.981759] audit: type=1400 audit(1596508362.567:210): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=7247 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:32:42 cobalt kernel: [  272.983405] audit: type=1400 audit(1596508362.567:211): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=7247 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:32:42 cobalt kernel: [  273.040932] audit: type=1400 audit(1596508362.623:212): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=7281 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:32:42 cobalt kernel: [  273.042574] audit: type=1400 audit(1596508362.627:213): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=7281 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:32:42 cobalt kernel: [  273.198463] audit: type=1400 audit(1596508362.783:214): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=7370 comm="apparmor_parser"
Aug  3 22:32:43 cobalt kernel: [  273.616793] audit: type=1400 audit(1596508363.199:215): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=7491 comm="apparmor_parser"
Aug  3 22:32:43 cobalt kernel: [  273.617201] audit: type=1400 audit(1596508363.199:216): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe" pid=7492 comm="apparmor_parser"
Aug  3 22:32:43 cobalt kernel: [  273.617205] audit: type=1400 audit(1596508363.199:217): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe//kmod" pid=7492 comm="apparmor_parser"
Aug  3 22:32:52 cobalt kernel: [  283.373693] audit: type=1400 audit(1596508372.958:228): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=7558 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:32:52 cobalt kernel: [  283.376064] audit: type=1400 audit(1596508372.958:229): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=7558 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:32:53 cobalt kernel: [  283.425445] audit: type=1400 audit(1596508373.006:230): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=7597 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:32:53 cobalt kernel: [  283.427428] audit: type=1400 audit(1596508373.010:231): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=7597 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:32:53 cobalt kernel: [  284.275680] audit: type=1400 audit(1596508373.858:232): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=7757 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:32:53 cobalt kernel: [  284.277485] audit: type=1400 audit(1596508373.858:233): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=7757 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:03 cobalt kernel: [  294.382714] audit: type=1400 audit(1596508383.966:234): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=7835 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:03 cobalt kernel: [  294.384678] audit: type=1400 audit(1596508383.966:235): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=7835 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:05 cobalt kernel: [  295.799955] audit: type=1400 audit(1596508385.382:236): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8382 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:05 cobalt kernel: [  295.801966] audit: type=1400 audit(1596508385.386:237): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8382 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:05 cobalt kernel: [  295.847021] audit: type=1400 audit(1596508385.430:238): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8416 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:05 cobalt kernel: [  295.848712] audit: type=1400 audit(1596508385.430:239): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8416 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:05 cobalt kernel: [  295.990260] audit: type=1400 audit(1596508385.574:240): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=8507 comm="apparmor_parser"
Aug  3 22:33:06 cobalt kernel: [  296.422811] audit: type=1400 audit(1596508386.006:241): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=8629 comm="apparmor_parser"
Aug  3 22:33:06 cobalt kernel: [  296.423172] audit: type=1400 audit(1596508386.006:242): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe" pid=8630 comm="apparmor_parser"
Aug  3 22:33:06 cobalt kernel: [  296.423175] audit: type=1400 audit(1596508386.006:243): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="nvidia_modprobe//kmod" pid=8630 comm="apparmor_parser"
Aug  3 22:33:15 cobalt kernel: [  306.185744] audit: type=1400 audit(1596508395.766:254): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8700 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:15 cobalt kernel: [  306.188182] audit: type=1400 audit(1596508395.770:255): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8700 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:15 cobalt kernel: [  306.244369] audit: type=1400 audit(1596508395.826:256): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8738 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:15 cobalt kernel: [  306.246512] audit: type=1400 audit(1596508395.830:257): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8738 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:15 cobalt kernel: [  306.338635] audit: type=1400 audit(1596508395.922:258): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8785 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:15 cobalt kernel: [  306.341697] audit: type=1400 audit(1596508395.922:259): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8785 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:26 cobalt kernel: [  316.495627] audit: type=1400 audit(1596508406.078:260): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=8860 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:26 cobalt kernel: [  316.497969] audit: type=1400 audit(1596508406.078:261): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=8860 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:27 cobalt kernel: [  317.846886] audit: type=1400 audit(1596508407.430:262): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9390 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:27 cobalt kernel: [  317.848537] audit: type=1400 audit(1596508407.430:263): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9390 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:27 cobalt kernel: [  317.900080] audit: type=1400 audit(1596508407.482:264): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9424 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:27 cobalt kernel: [  317.902553] audit: type=1400 audit(1596508407.486:265): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9424 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:27 cobalt kernel: [  317.971638] audit: type=1400 audit(1596508407.554:266): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9456 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:27 cobalt kernel: [  317.973339] audit: type=1400 audit(1596508407.554:267): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9456 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:29 cobalt kernel: [  320.395336] audit: type=1400 audit(1596508409.978:268): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="lxd-test_</var/snap/lxd/common/lxd>" pid=9553 comm="apparmor_parser"
Aug  3 22:33:30 cobalt kernel: [  320.957587] audit: type=1400 audit(1596508410.538:269): apparmor="STATUS" operation="profile_load" label="lxd-test_</var/snap/lxd/common/lxd>//&:lxd-test_<var-snap-lxd-common-lxd>:unconfined" name="lsb_release" pid=9673 comm="apparmor_parser"
Aug  3 22:33:40 cobalt kernel: [  330.635515] audit: type=1400 audit(1596508420.218:282): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9726 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:40 cobalt kernel: [  330.637856] audit: type=1400 audit(1596508420.218:283): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9726 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:40 cobalt kernel: [  330.700559] audit: type=1400 audit(1596508420.282:284): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9765 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:40 cobalt kernel: [  330.702439] audit: type=1400 audit(1596508420.286:285): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9765 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:40 cobalt kernel: [  330.794208] audit: type=1400 audit(1596508420.378:286): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9810 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:40 cobalt kernel: [  330.797141] audit: type=1400 audit(1596508420.378:287): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9810 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:50 cobalt kernel: [  340.910519] audit: type=1400 audit(1596508430.494:288): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=9890 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:50 cobalt kernel: [  340.912547] audit: type=1400 audit(1596508430.494:289): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=9890 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:51 cobalt kernel: [  342.265548] audit: type=1400 audit(1596508431.846:290): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10419 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:51 cobalt kernel: [  342.267369] audit: type=1400 audit(1596508431.850:291): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10419 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Aug  3 22:33:51 cobalt kernel: [  342.320207] audit: type=1400 audit(1596508431.902:292): apparmor="DENIED" operation="open" profile="/snap/core/9665/usr/lib/snapd/snap-confine" name="/etc/pop-os/os-release" pid=10455 comm="snap-confine" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Aug  3 22:33:51 cobalt kernel: [  342.321973] audit: type=1400 audit(1596508431.902:293): apparmor="DENIED" operation="open" profile="snap.lxd.lxc" name="/var/lib/snapd/hostfs/etc/pop-os/os-release" pid=10455 comm="snap-exec" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
6

Ok, your raw.dnsmasq seems to be blocked by the new apparmor profile.
This is odd as I thought I added code specifically for that…

Will track it down and send a fix shortly.

Until then, unsetting raw.dnsmasq if at all an option for you should get you back up.

7

Oh, actually, it looks like you may have something weird going on with your raw.dnsmasq as the path it’s complaining about is /home/lxd/… not the expected /var/snap/lxd/… path.

Can you show lxc network show lxdbr1?

8

Actually, we have logic that specifically makes it skip apparmor if raw.dnsmasq is set, so this shouldn’t be possible unless you have some weird tricks going on in /var/snap/lxd/common/lxd/networks/lxdbr1, thinking something like a symlink for the raw file or tricks along those lines.

9

Can you show:

  • ls -lh /var/snap/lxd/common/lxd/networks/*
10

So yes, I am using a symlink at /var/snap/lxd which links out to /home/lxd. I’ve been using that setup for a while as a way to keep all the lxd data on another partition. This came from a recommendation I saw somewhere a while back (where I cannot say).

If that is the root problem, what is a better alternative? My system partition is intentionally small.

Including the other stuff you mentioned even so. As always, thanks for your help. (by the way, I had tried reiniting and using lxdbr1 instead of lxdbr0 as part of my fiddling around. I eventually reinited back to lxdbr0 the default.
ls -lh /var/snap/lxd/common/lxd/networks/*

drwxr-xr-x 2 root root 4.0K Aug  3 22:40 dnsmasq.hosts
-rw-r--r-- 1 root root  752 Aug  3 22:30 dnsmasq.pid
-rw-r--r-- 1 root root    1 Aug  3 22:30 dnsmasq.raw

lxc network show lxdbr0

config:
  ipv4.address: 10.125.247.1/24
  ipv4.nat: "true"
  ipv6.address: fd42:b08:490:5622::1/64
  ipv6.nat: "true"
  volatile.bridge.hwaddr: 00:16:3e:d8:c7:f1
description: ""
name: lxdbr0
type: bridge
used_by:
- /1.0/profiles/default
managed: true
status: Created
locations:
- none
11

Symlinks for anything under /var/snap/lxd is a very bad idea as apparmor and other kernel security features will resolve symlinks to their target before evaluation, then rejecting access due to it not being the expected path.

Using a bind-mount rather than a symlink will avoid most of those issues, note that you’ll want to make sure the bind-mount is in /etc/fstab and you’ll probably need to restart your system after putting that in place to make sure all mount namespaces are properly updated.

12

I’m actually very surprised that you didn’t hit any other issues with the instance profiles or other bits and pieces of LXD. We’ve had several issues with people trying to use symlinks for this in the past.

13

Well that fixed it. In retrospect, a bind mount seems like an obviously better choice. I think I had it that way so long, I had forgotten about it.

Now that you mention it, I have seen issues at times starting and stopping containers, where ZFS mounting and unmounting doesn’t happen the way it should. I’m guessing that there is at least a decent chance that this was a factor.