opened
trevorgfrancis
username_0
After snap refresh, reboot doesnt fix issue.

Ubuntu 16.04
Linux f8-c1-n5 4.13.0-38-generic #43~16.04.1-Ubuntu SMP Wed Mar 14 17:48:43 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

snap changes
ID   Status  Spawn                 Ready                 Summary
8    Done    2018-04-03T08:09:23Z  2018-04-03T08:09:33Z  Auto-refresh snap "lxd"
9    Error   2018-04-03T21:29:23Z  2018-04-03T21:29:35Z  Auto-refresh snap "lxd"
10   Done    2018-04-04T00:14:23Z  2018-04-04T00:14:35Z  Auto-refresh snaps "core", "lxd"
11   Done    2018-04-04T00:22:35Z  2018-04-04T00:22:35Z  Refresh all snaps: no updates
12   Done    2018-04-04T00:34:59Z  2018-04-04T00:34:59Z  Refresh all snaps: no updates

Apr 03 19:34:00 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Main process exited, code=exited, status=1/FAILURE
Apr 03 19:34:00 f8-c1-n5 lxd.daemon[1796]: cannot change profile for the next exec call: No such file or directory
Apr 03 19:34:00 f8-c1-n5 lxd.daemon[1796]: snap-update-ns failed with code 1: No such file or directory
Apr 03 19:34:00 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Control process exited, code=exited status=1
Apr 03 19:34:00 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Unit entered failed state.
Apr 03 19:34:00 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Failed with result 'exit-code'.
Apr 03 19:34:00 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Service hold-off time over, scheduling restart.
Apr 03 19:34:00 f8-c1-n5 systemd[1]: Stopped Service for snap application lxd.daemon.
Apr 03 19:34:00 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Start request repeated too quickly.
Apr 03 19:34:00 f8-c1-n5 systemd[1]: Failed to start Service for snap application lxd.daemon.
cannot change profile for the next exec call: No such file or directory
issue
created
trevorgfrancis
username_0
Apr  3 19:55:31 f8-c1-n5 kernel: [ 1348.869655] audit: type=1400 audit(1522803331.215:23): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name="snap-update-ns.lxd" pid=3314 comm="snap-confine"
Apr  3 19:55:31 f8-c1-n5 systemd[1]: snap.lxd.daemon.service: Main process exited, code=exited, status=1/FAILURE
Apr  3 19:55:31 f8-c1-n5 lxd.daemon[3317]: cannot change profile for the next exec call: No such file or directory
Apr  3 19:55:31 f8-c1-n5 lxd.daemon[3317]: snap-update-ns failed with code 1: No such file or directory
comment
created
stgraber
username_1
Hmm, so that's a snapd issue since it doesn't even spawn any of our scripts... It reads as if apparmor somehow didn't get the relevant profiles loaded.

Did you try rebooting after those two snaps refreshed in case that helps?
You mentioned rebooting but your logs above predate the update of the core snap.
comment
created
trevorgfrancis
username_0
reboot occured after snap refresh and attempted kernel update, then reboot...same.
comment
created
stgraber
username_1
Okay, can you post the output of both `apparmor_status` and `systemctl -a` from that system?
I'm not that familiar with what snapd does under the hood but hopefully we can figure it out by comparing with test systems here.
comment
created
trevorgfrancis
username_0
root@f8-c1-n5:/var/lib/snapd/apparmor/profiles# apparmor_status
apparmor module is loaded.
22 profiles are loaded.
22 profiles are in enforce mode.
   /sbin/dhclient
   /snap/core/4327/usr/lib/snapd/snap-confine
   /snap/core/4327/usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/NetworkManager/nm-dhcp-helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/lib/snapd/snap-confine
   /usr/lib/snapd/snap-confine//mount-namespace-capture-helper
   /usr/lib/snapd/snap-confine//snap_update_ns
   /usr/sbin/ntpd
   /usr/sbin/tcpdump
   snap-update-ns.core
   snap-update-ns.lxd
   snap.core.hook.configure
   snap.lxd.benchmark
   snap.lxd.check-kernel
   snap.lxd.daemon
   snap.lxd.database
   snap.lxd.hook.configure
   snap.lxd.lxc
   snap.lxd.lxd
   snap.lxd.migrate
0 profiles are in complain mode.
2 processes have profiles defined.
0 processes are in enforce mode.
0 processes are in complain mode.
2 processes are unconfined but have a profile defined.
   /sbin/dhclient (1408)
   /usr/sbin/ntpd (1535)


root@f8-c1-n5:/var/lib/snapd/apparmor/profiles# systemctl -a
  UNIT                                                                                             LOAD      ACTIVE   SUB       DESCRIPTION
  proc-sys-fs-binfmt_misc.automount                                                                loaded    active   waiting   Arbitrary Executable File Formats File System Automount Point
  dev-disk-by\x2did-scsi\x2d3600508b1001c8a72b6f7a01afe964c74.device                               loaded    active   plugged   LOGICAL_VOLUME
  dev-disk-by\x2did-scsi\x2d3600508b1001c8a72b6f7a01afe964c74\x2dpart1.device                      loaded    active   plugged   LOGICAL_VOLUME 1
  dev-disk-by\x2did-scsi\x2d3600508b1001c8a72b6f7a01afe964c74\x2dpart2.device                      loaded    active   plugged   LOGICAL_VOLUME 2
  dev-disk-by\x2did-scsi\x2d3600508b1001c8a72b6f7a01afe964c74\x2dpart5.device                      loaded    active   plugged   LOGICAL_VOLUME 5
  dev-disk-by\x2did-wwn\x2d0x600508b1001c8a72b6f7a01afe964c74.device                               loaded    active   plugged   LOGICAL_VOLUME
  dev-disk-by\x2did-wwn\x2d0x600508b1001c8a72b6f7a01afe964c74\x2dpart1.device                      loaded    active   plugged   LOGICAL_VOLUME 1
  dev-disk-by\x2did-wwn\x2d0x600508b1001c8a72b6f7a01afe964c74\x2dpart2.device                      loaded    active   plugged   LOGICAL_VOLUME 2
  dev-disk-by\x2did-wwn\x2d0x600508b1001c8a72b6f7a01afe964c74\x2dpart5.device                      loaded    active   plugged   LOGICAL_VOLUME 5
  dev-disk-by\x2dpath-pci\x2d0000:0c:00.0\x2dscsi\x2d0:1:0:0.device                                loaded    active   plugged   LOGICAL_VOLUME
  dev-disk-by\x2dpath-pci\x2d0000:0c:00.0\x2dscsi\x2d0:1:0:0\x2dpart1.device                       loaded    active   plugged   LOGICAL_VOLUME 1
  dev-disk-by\x2dpath-pci\x2d0000:0c:00.0\x2dscsi\x2d0:1:0:0\x2dpart2.device                       loaded    active   plugged   LOGICAL_VOLUME 2
  dev-disk-by\x2dpath-pci\x2d0000:0c:00.0\x2dscsi\x2d0:1:0:0\x2dpart5.device                       loaded    active   plugged   LOGICAL_VOLUME 5
  dev-disk-by\x2duuid-df66347c\x2d8781\x2d4913\x2dbb0b\x2d70e06ae7043f.device                      loaded    active   plugged   LOGICAL_VOLUME 5
  dev-disk-by\x2duuid-e023843b\x2d1e63\x2d47ed\x2d8b01\x2d2d15e2a23a43.device                      loaded    active   plugged   LOGICAL_VOLUME 1
  dev-loop0.device                                                                                 loaded    active   plugged   /dev/loop0
  dev-loop1.device                                                                                 loaded    active   plugged   /dev/loop1
  dev-loop2.device                                                                                 loaded    active   plugged   /dev/loop2
  dev-loop3.device                                                                                 loaded    active   plugged   /dev/loop3
  dev-loop4.device                                                                                 loaded    active   plugged   /dev/loop4
  dev-rfkill.device                                                                                loaded    active   plugged   /dev/rfkill
  dev-sda.device                                                                                   loaded    active   plugged   LOGICAL_VOLUME
  dev-sda1.device                                                                                  loaded    active   plugged   LOGICAL_VOLUME 1
  dev-sda2.device                                                                                  loaded    active   plugged   LOGICAL_VOLUME 2
  dev-sda5.device                                                                                  loaded    active   plugged   LOGICAL_VOLUME 5
  dev-ttyprintk.device                                                                             loaded    active   plugged   /dev/ttyprintk
  dev-ttyS0.device                                                                                 loaded    active   plugged   /dev/ttyS0
  dev-ttyS1.device                                                                                 loaded    active   plugged   /dev/ttyS1
  dev-ttyS10.device                                                                                loaded    active   plugged   /dev/ttyS10
  dev-ttyS11.device                                                                                loaded    active   plugged   /dev/ttyS11
  dev-ttyS12.device                                                                                loaded    active   plugged   /dev/ttyS12
  dev-ttyS13.device                                                                                loaded    active   plugged   /dev/ttyS13
  dev-ttyS14.device                                                                                loaded    active   plugged   /dev/ttyS14
  dev-ttyS15.device                                                                                loaded    active   plugged   /dev/ttyS15
  dev-ttyS16.device                                                                                loaded    active   plugged   /dev/ttyS16
  dev-ttyS17.device                                                                                loaded    active   plugged   /dev/ttyS17
  dev-ttyS18.device                                                                                loaded    active   plugged   /dev/ttyS18
  dev-ttyS19.device                                                                                loaded    active   plugged   /dev/ttyS19
  dev-ttyS2.device                                                                                 loaded    active   plugged   /dev/ttyS2
  dev-ttyS20.device                                                                                loaded    active   plugged   /dev/ttyS20
  dev-ttyS21.device                                                                                loaded    active   plugged   /dev/ttyS21
  dev-ttyS22.device                                                                                loaded    active   plugged   /dev/ttyS22
  dev-ttyS23.device                                                                                loaded    active   plugged   /dev/ttyS23
  dev-ttyS24.device                                                                                loaded    active   plugged   /dev/ttyS24
  dev-ttyS25.device                                                                                loaded    active   plugged   /dev/ttyS25
  dev-ttyS26.device                                                                                loaded    active   plugged   /dev/ttyS26
  dev-ttyS27.device                                                                                loaded    active   plugged   /dev/ttyS27
  dev-ttyS28.device                                                                                loaded    active   plugged   /dev/ttyS28
  dev-ttyS29.device                                                                                loaded    active   plugged   /dev/ttyS29
  dev-ttyS3.device                                                                                 loaded    active   plugged   /dev/ttyS3
  dev-ttyS30.device                                                                                loaded    active   plugged   /dev/ttyS30
  dev-ttyS31.device                                                                                loaded    active   plugged   /dev/ttyS31
  dev-ttyS4.device                                                                                 loaded    active   plugged   /dev/ttyS4
  dev-ttyS5.device                                                                                 loaded    active   plugged   /dev/ttyS5
  dev-ttyS6.device                                                                                 loaded    active   plugged   /dev/ttyS6
  dev-ttyS7.device                                                                                 loaded    active   plugged   /dev/ttyS7
  dev-ttyS8.device                                                                                 loaded    active   plugged   /dev/ttyS8
  dev-ttyS9.device                                                                                 loaded    active   plugged   /dev/ttyS9
  sys-devices-pci0000:00-0000:00:01.0-0000:02:00.0-net-eth0.device                                 loaded    active   plugged   NetXtreme II BCM57711E 10-Gigabit PCIe (NC532i Dual Port 10GbE Multifunction BL-C Adapter)
  sys-devices-pci0000:00-0000:00:01.0-0000:02:00.1-net-eth1.device                                 loaded    active   plugged   NetXtreme II BCM57711E 10-Gigabit PCIe (NC532i Dual Port 10GbE Multifunction BL-C Adapter)
  sys-devices-pci0000:00-0000:00:1c.0-0000:0c:00.0-host0-target0:1:0-0:1:0:0-block-sda-sda1.device loaded    active   plugged   LOGICAL_VOLUME 1
  sys-devices-pci0000:00-0000:00:1c.0-0000:0c:00.0-host0-target0:1:0-0:1:0:0-block-sda-sda2.device loaded    active   plugged   LOGICAL_VOLUME 2
  sys-devices-pci0000:00-0000:00:1c.0-0000:0c:00.0-host0-target0:1:0-0:1:0:0-block-sda-sda5.device loaded    active   plugged   LOGICAL_VOLUME 5
  sys-devices-pci0000:00-0000:00:1c.0-0000:0c:00.0-host0-target0:1:0-0:1:0:0-block-sda.device      loaded    active   plugged   LOGICAL_VOLUME
  sys-devices-platform-serial8250-tty-ttyS0.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS0
  sys-devices-platform-serial8250-tty-ttyS10.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS10
  sys-devices-platform-serial8250-tty-ttyS11.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS11
  sys-devices-platform-serial8250-tty-ttyS12.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS12
  sys-devices-platform-serial8250-tty-ttyS13.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS13
  sys-devices-platform-serial8250-tty-ttyS14.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS14
  sys-devices-platform-serial8250-tty-ttyS15.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS15
  sys-devices-platform-serial8250-tty-ttyS16.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS16
  sys-devices-platform-serial8250-tty-ttyS17.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS17
  sys-devices-platform-serial8250-tty-ttyS18.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS18
  sys-devices-platform-serial8250-tty-ttyS19.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS19
  sys-devices-platform-serial8250-tty-ttyS2.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS2
  sys-devices-platform-serial8250-tty-ttyS20.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS20
  sys-devices-platform-serial8250-tty-ttyS21.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS21
  sys-devices-platform-serial8250-tty-ttyS22.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS22
  sys-devices-platform-serial8250-tty-ttyS23.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS23
  sys-devices-platform-serial8250-tty-ttyS24.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS24
  sys-devices-platform-serial8250-tty-ttyS25.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS25
  sys-devices-platform-serial8250-tty-ttyS26.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS26
  sys-devices-platform-serial8250-tty-ttyS27.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS27
  sys-devices-platform-serial8250-tty-ttyS28.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS28
  sys-devices-platform-serial8250-tty-ttyS29.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS29
  sys-devices-platform-serial8250-tty-ttyS3.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS3
  sys-devices-platform-serial8250-tty-ttyS30.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS30
  sys-devices-platform-serial8250-tty-ttyS31.device                                                loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS31
  sys-devices-platform-serial8250-tty-ttyS4.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS4
  sys-devices-platform-serial8250-tty-ttyS5.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS5
  sys-devices-platform-serial8250-tty-ttyS6.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS6
  sys-devices-platform-serial8250-tty-ttyS7.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS7
  sys-devices-platform-serial8250-tty-ttyS8.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS8
  sys-devices-platform-serial8250-tty-ttyS9.device                                                 loaded    active   plugged   /sys/devices/platform/serial8250/tty/ttyS9
  sys-devices-pnp0-00:03-tty-ttyS1.device                                                          loaded    active   plugged   /sys/devices/pnp0/00:03/tty/ttyS1
  sys-devices-virtual-block-loop0.device                                                           loaded    active   plugged   /sys/devices/virtual/block/loop0
  sys-devices-virtual-block-loop1.device                                                           loaded    active   plugged   /sys/devices/virtual/block/loop1
  sys-devices-virtual-block-loop2.device                                                           loaded    active   plugged   /sys/devices/virtual/block/loop2
  sys-devices-virtual-block-loop3.device                                                           loaded    active   plugged   /sys/devices/virtual/block/loop3
  sys-devices-virtual-block-loop4.device                                                           loaded    active   plugged   /sys/devices/virtual/block/loop4
  sys-devices-virtual-misc-rfkill.device                                                           loaded    active   plugged   /sys/devices/virtual/misc/rfkill
  sys-devices-virtual-net-bond0.device                                                             loaded    active   plugged   /sys/devices/virtual/net/bond0
  sys-devices-virtual-net-hostnet.device                                                           loaded    active   plugged   /sys/devices/virtual/net/hostnet
  sys-devices-virtual-tty-ttyprintk.device                                                         loaded    active   plugged   /sys/devices/virtual/tty/ttyprintk
  sys-module-configfs.device                                                                       loaded    active   plugged   /sys/module/configfs
  sys-module-fuse.device                                                                           loaded    active   plugged   /sys/module/fuse
  sys-subsystem-net-devices-bond0.device                                                           loaded    active   plugged   /sys/subsystem/net/devices/bond0
  sys-subsystem-net-devices-eth0.device                                                            loaded    active   plugged   NetXtreme II BCM57711E 10-Gigabit PCIe (NC532i Dual Port 10GbE Multifunction BL-C Adapter)
  sys-subsystem-net-devices-eth1.device                                                            loaded    active   plugged   NetXtreme II BCM57711E 10-Gigabit PCIe (NC532i Dual Port 10GbE Multifunction BL-C Adapter)
  sys-subsystem-net-devices-hostnet.device                                                         loaded    active   plugged   /sys/subsystem/net/devices/hostnet
  -.mount                                                                                          loaded    active   mounted   /
  dev-hugepages.mount                                                                              loaded    active   mounted   Huge Pages File System
  dev-mqueue.mount                                                                                 loaded    active   mounted   POSIX Message Queue File System
  proc-sys-fs-binfmt_misc.mount                                                                    loaded    inactive dead      Arbitrary Executable File Formats File System
  run-snapd-ns-lxd.mnt.mount                                                                       loaded    active   mounted   /run/snapd/ns/lxd.mnt
  run-snapd-ns.mount                                                                               loaded    active   mounted   /run/snapd/ns
  run-user-0.mount                                                                                 loaded    active   mounted   /run/user/0
  snap-core-4206.mount                                                                             loaded    active   mounted   Mount unit for core
  snap-core-4327.mount                                                                             loaded    active   mounted   Mount unit for core
  snap-lxd-5866.mount                                                                              loaded    active   mounted   Mount unit for lxd
  snap-lxd-6418.mount                                                                              loaded    active   mounted   Mount unit for lxd
  snap-lxd-6469.mount                                                                              loaded    active   mounted   Mount unit for lxd
  sys-fs-fuse-connections.mount                                                                    loaded    active   mounted   FUSE Control File System
  sys-kernel-config.mount                                                                          loaded    active   mounted   Configuration File System
  sys-kernel-debug-tracing.mount                                                                   loaded    active   mounted   /sys/kernel/debug/tracing
  sys-kernel-debug.mount                                                                           loaded    active   mounted   Debug File System
* tmp.mount                                                                                        not-found inactive dead      tmp.mount
  systemd-ask-password-console.path                                                                loaded    active   waiting   Dispatch Password Requests to Console Directory Watch
  systemd-ask-password-plymouth.path                                                               loaded    inactive dead      Forward Password Requests to Plymouth Directory Watch
  systemd-ask-password-wall.path                                                                   loaded    active   waiting   Forward Password Requests to Wall Directory Watch
  systemd-networkd-resolvconf-update.path                                                          loaded    active   waiting   Trigger resolvconf update for networkd DNS
  init.scope                                                                                       loaded    active   running   System and Service Manager
  session-1.scope                                                                                  loaded    active   running   Session 1 of user root
  accounts-daemon.service                                                                          loaded    active   running   Accounts Service
  apparmor.service                                                                                 loaded    active   exited    LSB: AppArmor initialization
  apt-daily-upgrade.service                                                                        loaded    inactive dead      Daily apt upgrade and clean activities
  apt-daily.service                                                                                loaded    inactive dead      Daily apt download activities
* auditd.service                                                                                   not-found inactive dead      auditd.service
* clamav-daemon.service                                                                            not-found inactive dead      clamav-daemon.service
* console-screen.service                                                                           not-found inactive dead      console-screen.service
  console-setup.service                                                                            loaded    active   exited    Set console font and keymap
  cron.service                                                                                     loaded    active   running   Regular background program processing daemon
  dbus.service                                                                                     loaded    active   running   D-Bus System Message Bus
* display-manager.service                                                                          not-found inactive dead      display-manager.service
* dovecot.service                                                                                  not-found inactive dead      dovecot.service
  emergency.service                                                                                loaded    inactive dead      Emergency Shell
  friendly-recovery.service                                                                        loaded    inactive dead      Recovery mode menu
  getty-static.service                                                                             loaded    inactive dead      getty on tty2-tty6 if dbus and logind are not available
  getty@tty1.service                                                                               loaded    active   running   Getty on tty1
  grub-common.service                                                                              loaded    active   exited    LSB: Record successful boot for GRUB
  ifup@bond0.service                                                                               loaded    active   exited    ifup for bond0
  ifup@eth0.service                                                                                loaded    active   exited    ifup for eth0
  ifup@eth1.service                                                                                loaded    active   exited    ifup for eth1
  ifup@hostnet.service                                                                             loaded    active   exited    ifup for hostnet
  irqbalance.service                                                                               loaded    active   running   LSB: daemon to balance interrupts for SMP systems
* kbd.service                                                                                      not-found inactive dead      kbd.service
  keyboard-setup.service                                                                           loaded    active   exited    Set console keymap
  kmod-static-nodes.service                                                                        loaded    active   exited    Create list of required static device nodes for the current kernel
  lm-sensors.service                                                                               loaded    active   exited    Initialize hardware monitoring sensors
* mysql.service                                                                                    not-found inactive dead      mysql.service
  networking.service                                                                               loaded    active   exited    Raise network interfaces
  ntp.service                                                                                      loaded    active   running   LSB: Start NTP daemon
  ondemand.service                                                                                 loaded    active   exited    LSB: Set the CPU Frequency Scaling governor to "ondemand"
  plymouth-quit-wait.service                                                                       loaded    inactive dead      Hold until boot process finishes up
  plymouth-quit.service                                                                            loaded    inactive dead      Terminate Plymouth Boot Screen
  plymouth-read-write.service                                                                      loaded    inactive dead      Tell Plymouth To Write Out Runtime Data
  plymouth-start.service                                                                           loaded    inactive dead      Show Plymouth Boot Screen
  postfix.service                                                                                  loaded    active   running   LSB: Postfix Mail Transport Agent
* postgresql.service                                                                               not-found inactive dead      postgresql.service
* postgrey.service                                                                                 not-found inactive dead      postgrey.service
  rbdmap.service                                                                                   loaded    active   exited    Map RBD devices
  rc-local.service                                                                                 loaded    active   exited    /etc/rc.local Compatibility
  rescue.service                                                                                   loaded    inactive dead      Rescue Shell
  resolvconf.service                                                                               loaded    active   exited    Nameserver information manager
  rsyslog.service                                                                                  loaded    active   running   System Logging Service
* saslauthd.service                                                                                not-found inactive dead      saslauthd.service
  setvtrgb.service                                                                                 loaded    active   exited    Set console scheme
* smartd.service                                                                                   loaded    failed   failed    Self Monitoring and Reporting Technology (SMART) Daemon
  snap.lxd.daemon.service                                                                          loaded    active   running   Service for snap application lxd.daemon
  snapd.autoimport.service                                                                         loaded    inactive dead      Auto import assertions from block devices
  snapd.core-fixup.service                                                                         loaded    inactive dead      Automatically repair incorrect owner/permissions on core devices
  snapd.refresh.service                                                                            loaded    inactive dead      Automatically refresh installed snaps
  snapd.service                                                                                    loaded    active   running   Snappy daemon
  snapd.snap-repair.service                                                                        loaded    inactive dead      Automatically fetch and run repair assertions
* spamassassin.service                                                                             not-found inactive dead      spamassassin.service
  ssh.service                                                                                      loaded    active   running   OpenBSD Secure Shell server
  systemd-ask-password-console.service                                                             loaded    inactive dead      Dispatch Password Requests to Console
  systemd-ask-password-plymouth.service                                                            loaded    inactive dead      Forward Password Requests to Plymouth
  systemd-ask-password-wall.service                                                                loaded    inactive dead      Forward Password Requests to Wall
  systemd-binfmt.service                                                                           loaded    inactive dead      Set Up Additional Binary Formats
  systemd-fsck-root.service                                                                        loaded    inactive dead      File System Check on Root Device
  systemd-fsckd.service                                                                            loaded    inactive dead      File System Check Daemon to report status
  systemd-hwdb-update.service                                                                      loaded    inactive dead      Rebuild Hardware Database
  systemd-initctl.service                                                                          loaded    inactive dead      /dev/initctl Compatibility Daemon
  systemd-journal-flush.service                                                                    loaded    active   exited    Flush Journal to Persistent Storage
  systemd-journald.service                                                                         loaded    active   running   Journal Service
  systemd-logind.service                                                                           loaded    active   running   Login Service
  systemd-machine-id-commit.service                                                                loaded    inactive dead      Commit a transient machine-id on disk
* systemd-modules-load.service                                                                     loaded    failed   failed    Load Kernel Modules
  systemd-networkd-resolvconf-update.service                                                       loaded    inactive dead      Update resolvconf for networkd DNS
  systemd-random-seed.service                                                                      loaded    active   exited    Load/Save Random Seed
  systemd-remount-fs.service                                                                       loaded    active   exited    Remount Root and Kernel File Systems
  systemd-rfkill.service                                                                           loaded    inactive dead      Load/Save RF Kill Switch Status
  systemd-sysctl.service                                                                           loaded    active   exited    Apply Kernel Variables
* systemd-sysusers.service                                                                         not-found inactive dead      systemd-sysusers.service
  systemd-timesyncd.service                                                                        loaded    inactive dead      Network Time Synchronization
  systemd-tmpfiles-clean.service                                                                   loaded    inactive dead      Cleanup of Temporary Directories
  systemd-tmpfiles-setup-dev.service                                                               loaded    active   exited    Create Static Device Nodes in /dev
  systemd-tmpfiles-setup.service                                                                   loaded    active   exited    Create Volatile Files and Directories
  systemd-udev-trigger.service                                                                     loaded    active   exited    udev Coldplug all Devices
  systemd-udevd.service                                                                            loaded    active   running   udev Kernel Device Manager
* systemd-update-done.service                                                                      not-found inactive dead      systemd-update-done.service
  systemd-update-utmp-runlevel.service                                                             loaded    inactive dead      Update UTMP about System Runlevel Changes
  systemd-update-utmp.service                                                                      loaded    active   exited    Update UTMP about System Boot/Shutdown
  systemd-user-sessions.service                                                                    loaded    active   exited    Permit User Sessions
* systemd-vconsole-setup.service                                                                   not-found inactive dead      systemd-vconsole-setup.service
  ufw.service                                                                                      loaded    active   exited    Uncomplicated firewall
  uptimed.service                                                                                  loaded    active   running   uptime record daemon
  ureadahead-stop.service                                                                          loaded    inactive dead      Stop ureadahead data collection
  ureadahead.service                                                                               loaded    inactive dead      Read required files in advance
  user@0.service                                                                                   loaded    active   running   User Manager for UID 0
  uuidd.service                                                                                    loaded    inactive dead      Daemon for generating UUIDs
  zabbix-agent.service                                                                             loaded    active   running   Zabbix Agent
  -.slice                                                                                          loaded    active   active    Root Slice
  system-getty.slice                                                                               loaded    active   active    system-getty.slice
  system.slice                                                                                     loaded    active   active    System Slice
  user-0.slice                                                                                     loaded    active   active    User Slice of root
  user.slice                                                                                       loaded    active   active    User and Session Slice
  dbus.socket                                                                                      loaded    active   running   D-Bus System Message Bus Socket
  snapd.socket                                                                                     loaded    active   running   Socket activation for snappy daemon
  syslog.socket                                                                                    loaded    active   running   Syslog Socket
  systemd-fsckd.socket                                                                             loaded    active   listening fsck to fsckd communication Socket
  systemd-initctl.socket                                                                           loaded    active   listening /dev/initctl Compatibility Named Pipe
  systemd-journald-audit.socket                                                                    loaded    active   running   Journal Audit Socket
  systemd-journald-dev-log.socket                                                                  loaded    active   running   Journal Socket (/dev/log)
  systemd-journald.socket                                                                          loaded    active   running   Journal Socket
  systemd-rfkill.socket                                                                            loaded    active   listening Load/Save RF Kill Switch Status /dev/rfkill Watch
  systemd-udevd-control.socket                                                                     loaded    active   running   udev Control Socket
  systemd-udevd-kernel.socket                                                                      loaded    active   running   udev Kernel Socket
  uuidd.socket                                                                                     loaded    active   listening UUID daemon activation socket
  dev-disk-by\x2did-scsi\x2d3600508b1001c8a72b6f7a01afe964c74\x2dpart5.swap                        loaded    active   active    /dev/disk/by-id/scsi-3600508b1001c8a72b6f7a01afe964c74-part5
  dev-disk-by\x2did-wwn\x2d0x600508b1001c8a72b6f7a01afe964c74\x2dpart5.swap                        loaded    active   active    /dev/disk/by-id/wwn-0x600508b1001c8a72b6f7a01afe964c74-part5
  dev-disk-by\x2dpath-pci\x2d0000:0c:00.0\x2dscsi\x2d0:1:0:0\x2dpart5.swap                         loaded    active   active    /dev/disk/by-path/pci-0000:0c:00.0-scsi-0:1:0:0-part5
  dev-disk-by\x2duuid-df66347c\x2d8781\x2d4913\x2dbb0b\x2d70e06ae7043f.swap                        loaded    active   active    /dev/disk/by-uuid/df66347c-8781-4913-bb0b-70e06ae7043f
  dev-sda5.swap                                                                                    loaded    active   active    /dev/sda5
  basic.target                                                                                     loaded    active   active    Basic System
  ceph-fuse.target                                                                                 loaded    active   active    ceph target allowing to start/stop all ceph-fuse@.service instances at once
  ceph.target                                                                                      loaded    active   active    ceph target allowing to start/stop all ceph*@.service instances at once
  cryptsetup.target                                                                                loaded    active   active    Encrypted Volumes
  emergency.target                                                                                 loaded    inactive dead      Emergency Mode
  getty.target                                                                                     loaded    active   active    Login Prompts
  graphical.target                                                                                 loaded    active   active    Graphical Interface
  local-fs-pre.target                                                                              loaded    active   active    Local File Systems (Pre)
  local-fs.target                                                                                  loaded    active   active    Local File Systems
  mail-transport-agent.target                                                                      loaded    active   active    Mail Transport Agent
  multi-user.target                                                                                loaded    active   active    Multi-User System
  network-online.target                                                                            loaded    active   active    Network is Online
  network-pre.target                                                                               loaded    active   active    Network (Pre)
  network.target                                                                                   loaded    active   active    Network
  nss-lookup.target                                                                                loaded    inactive dead      Host and Network Name Lookups
  nss-user-lookup.target                                                                           loaded    active   active    User and Group Name Lookups
  paths.target                                                                                     loaded    active   active    Paths
  remote-fs-pre.target                                                                             loaded    active   active    Remote File Systems (Pre)
  remote-fs.target                                                                                 loaded    active   active    Remote File Systems
  rescue.target                                                                                    loaded    inactive dead      Rescue Mode
  shutdown.target                                                                                  loaded    inactive dead      Shutdown
  slices.target                                                                                    loaded    active   active    Slices
  sockets.target                                                                                   loaded    active   active    Sockets
  swap.target                                                                                      loaded    active   active    Swap
  sysinit.target                                                                                   loaded    active   active    System Initialization
* syslog.target                                                                                    not-found inactive dead      syslog.target
  time-sync.target                                                                                 loaded    active   active    System Time Synchronized
  timers.target                                                                                    loaded    active   active    Timers
  umount.target                                                                                    loaded    inactive dead      Unmount All Filesystems
  apt-daily-upgrade.timer                                                                          loaded    active   waiting   Daily apt upgrade and clean activities
  apt-daily.timer                                                                                  loaded    active   waiting   Daily apt download activities
  snapd.refresh.timer                                                                              loaded    active   waiting   Timer to automatically refresh installed snaps
  snapd.snap-repair.timer                                                                          loaded    inactive dead      Timer to automatically fetch and run repair assertions
  systemd-tmpfiles-clean.timer                                                                     loaded    active   waiting   Daily Cleanup of Temporary Directories
  ureadahead-stop.timer                                                                            loaded    active   elapsed   Stop ureadahead data collection 45s after completed startup

LOAD   = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB    = The low-level unit activation state, values depend on unit type.

281 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
comment
created
stgraber
username_1
Oh and `snap interfaces` too
comment
created
trevorgfrancis
username_0
root@f8-c1-n5:/var/lib/snapd/apparmor/profiles# snap interfaces
Slot                       Plug
:account-control           -
:accounts-service          -
:alsa                      -
:autopilot-introspection   -
:avahi-control             -
:avahi-observe             -
:bluetooth-control         -
:bluez                     -
:broadcom-asic-control     -
:browser-support           -
:camera                    -
:classic-support           -
:core-support              core:core-support-plug
:cups-control              -
:dcdbas-control            -
:desktop                   -
:desktop-legacy            -
:docker-support            -
:firewall-control          -
:framebuffer               -
:fuse-support              -
:gpg-keys                  -
:gpg-public-keys           -
:gpio-memory-control       -
:greengrass-support        -
:gsettings                 -
:hardware-observe          -
:hardware-random-control   -
:hardware-random-observe   -
:home                      -
:io-ports-control          -
:joystick                  -
:kernel-module-control     -
:kubernetes-support        -
:kvm                       -
:libvirt                   -
:locale-control            -
:log-observe               -
:lxd-support               lxd
:modem-manager             -
:mount-observe             -
:netlink-audit             -
:netlink-connector         -
:network                   lxd
:network-bind              -
:network-control           -
:network-manager           -
:network-observe           -
:network-setup-control     -
:network-setup-observe     -
:ofono                     -
:opengl                    -
:openvswitch               -
:openvswitch-support       -
:optical-drive             -
:password-manager-service  -
:physical-memory-control   -
:physical-memory-observe   -
:ppp                       -
:process-control           -
:pulseaudio                -
:raw-usb                   -
:removable-media           -
:screen-inhibit-control    -
:shutdown                  -
:snapd-control             -
:ssh-keys                  -
:ssh-public-keys           -
:system-observe            lxd
:system-trace              -
:time-control              -
:timeserver-control        -
:timezone-control          -
:tpm                       -
:uhid                      -
:unity7                    -
:upower-observe            -
:wayland                   -
:x11                       -
lxd:lxd                    -
comment
created
stgraber
username_1
What happens if you run `lxd --help`?
comment
created
trevorgfrancis
username_0
Whoa. Its showing stopped container. This was not happening earlier. 

When I try and launch the container, it tells me:


lxc 20180404012550.105 ERROR    lxc_parse - parse.c:lxc_file_for_each_line_mmap:102 - Failed to parse config: lxc.aa_profile=unconfined
lxc 20180404012550.106 ERROR    lxc_confile - confile.c:parse_line:2340 - Unknown configuration key "lxc.aa_profile"
lxc 20180404012550.106 ERROR    lxc_parse - parse.c:lxc_file_for_each_line_mmap:102 - Failed to parse config: lxc.aa_profile=unconfined


However, the profile assigned to this container has no such entry. When I try and update the default profile, it tells me that the lxc commands are wrong...but they have all compliant commands. Its almost like the profile is stuck in a state between removing the pre 3.0 rawlxc profiles and the 3.0 compliant profile.
comment
created
trevorgfrancis
username_0
I was able to delete the container and profiles and bring it back up. This resolved the issue.
comment
created
stgraber
username_1
Was the key maybe directly assigned to the container? That'd explain why deleting and recreating it would fix it but modifying the profile wouldn't.
comment
created
stgraber
username_1
Updating the default profile was likely making those errors surface because updating a profile causes all containers that use it to reload their config, so a locally set `raw.lxc` on the container would then report an error when updating the profile too.
comment
closed
stgraber
username_1
issue
created
C0rn3j
username_2
Just had this happen too on 16.04 (second time; but probably a slightly different issue albeit with the same error message).

Both times it was dead apparmor.

Simply executing the following fixes it:
```
systemctl restart apparmor
snap restart lxd
```
comment
created
ttepatti
username_3
@username_2 I had the exact same issue, and your fix worked perfectly! For those of you who are running into this issue on Kali Linux, I don't believe apparmor starts at boot, forcing you to restart/start the service each time you boot your device. As a permanent solution, set apparmor to start at boot.
comment
created
hakimov2021
username_4
-- sudo service apparmor teardown
-- docker stop $(docker ps -qa)

1) sudo service apparmor restart
comment
created
uudecode
username_5
Thanks dude!
comment