guix system disk-image: Could not access KVM kernel module: Permission denied

guix system disk-image: Could not access KVM kernel module: Permission denied

[Pierre Neidhardt]

[-- Attachment #1: Type: text/plain, Size: 2683 bytes --]


I'm trying to generate a disk image of Guix.
The image creation process goes fine until the start of QEMU:

	creating raw image of 2607.99 MiB...
	Formatting '/gnu/store/fwjlpcwc3b81m2s6phwldwyxpd3wzsjm-disk-image', fmt=raw size=2734679872
	Could not access KVM kernel module: Permission denied
	qemu-system-x86_64: failed to initialize KVM: Permission denied
	file-size: /gnu/store/xsb0k5lrbrc63kardzxa7h4qvland6n2-profile/etc/ssl/certs/NetLock_Arany_=Class_Gold=_F??tan??s??tv??ny:2.6.73.65.44.228.0.16.pem: No such file or directory
	file-size: /gnu/store/xsb0k5lrbrc63kardzxa7h4qvland6n2-profile/etc/ssl/certs/T??RKTRUST_Elektronik_Sertifika_Hizmet_Sa??lay??c??s??_H5:2.7.0.142.23.254.36.32.129.pem: No such file or directory
	file-size: /gnu/store/xsb0k5lrbrc63kardzxa7h4qvland6n2-profile/etc/ssl/certs/AC_Ra??z_Certic??mara_S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem: No such file or directory
	file-size: /gnu/store/d48rkmvrbzaabxdldcrdps7cf27rm092-nss-certs-3.35/etc/ssl/certs/NetLock_Arany_=Class_Gold=_F??tan??s??tv??ny:2.6.73.65.44.228.0.16.pem: No such file or directory
	file-size: /gnu/store/d48rkmvrbzaabxdldcrdps7cf27rm092-nss-certs-3.35/etc/ssl/certs/T??RKTRUST_Elektronik_Sertifika_Hizmet_Sa??lay??c??s??_H5:2.7.0.142.23.254.36.32.129.pem: No such file or directory
	file-size: /gnu/store/d48rkmvrbzaabxdldcrdps7cf27rm092-nss-certs-3.35/etc/ssl/certs/AC_Ra??z_Certic??mara_S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem: No such file or directory
	Backtrace:
	           2 (primitive-load "/gnu/store/iyjms00w31p51gz9jfdvrlk7qnd?")
	In ./gnu/build/vm.scm:
	    163:4  1 (load-in-linux-vm _ #:output _ #:qemu _ #:memory-size _ ?)
	In unknown file:
	           0 (scm-error misc-error #f "~A ~S" ("qemu failed" "qem?") #)

	ERROR: In procedure scm-error:
	qemu failed "qemu-system-x86_64"
	builder for `/gnu/store/qaaf9mr4zwdpfxg0a7gvgl6wyrwrg5dn-disk-image.drv' failed with exit code 1
	guix system: error: build failed: build of `/gnu/store/qaaf9mr4zwdpfxg0a7gvgl6wyrwrg5dn-disk-image.drv' failed

My host system is Void Linux (which I don't know so well).
Permissions for /dev/kvm seem to be correct:

	> ls -l /dev/kvm
	crw-rw----   1 root           kvm             0 2018-03-03 14:56 /dev/kvm

My user is part of the kvm group.  Also the module seems to be loaded fine:

	> lsmod | grep kvm
	kvm_intel             225280  0
	kvm                   630784  1 kvm_intel
	irqbypass              16384  1 kvm

Not sure what's wrong.  I am not very familiar with QEMU / KVM I'm afraid...
Any clue?

Besides, and maybe unrelated, some certificates seem to be missing.  Any
idea how that could happen?

--
Pierre Neidhardt

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 487 bytes --]

Re: guix system disk-image: Could not access KVM kernel module: Permission denied

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 863 bytes --]

On Sat, Mar 03, 2018 at 05:14:32PM +0100, Pierre Neidhardt wrote:
> My host system is Void Linux (which I don't know so well).
> Permissions for /dev/kvm seem to be correct:
> 
> 	> ls -l /dev/kvm
> 	crw-rw----   1 root           kvm             0 2018-03-03 14:56 /dev/kvm
> 
> My user is part of the kvm group.  Also the module seems to be loaded fine:
> 
> 	> lsmod | grep kvm
> 	kvm_intel             225280  0
> 	kvm                   630784  1 kvm_intel
> 	irqbypass              16384  1 kvm
> 
> Not sure what's wrong.  I am not very familiar with QEMU / KVM I'm afraid...
> Any clue?
> 
> Besides, and maybe unrelated, some certificates seem to be missing.  Any
> idea how that could happen?

Did you try adding the guixbuild users to the KVM group?

https://www.gnu.org/software/guix/manual/html_node/Build-Environment-Setup.html

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]