From 5a3475fc508cd3f171d336936355abe9c6252d91 Mon Sep 17 00:00:00 2001 From: Satya Jhaveri Date: Fri, 12 Dec 2025 12:39:34 +1100 Subject: [PATCH] Update to aa-profile for online volume resize with multipath iSCSI When using PureStorage as an iSCSI backend with the nova-compute charm in aa-profile-mode=enforce, online volume extend operations fail, as reading /dev/dm-* paths is prevented by AppArmor with the log like: apparmor="DENIED" operation="open" profile="/usr/bin/nova-compute" name="/dev/dm-18" pid=1065379 comm="blockdev" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 Lack of the permission prevents the updated volume size being applied to instances. Closes-Bug: #2116217 Change-Id: Ic584906152b618e9e901b8a76ee1934292dfab8f Signed-off-by: Satya Jhaveri --- templates/usr.bin.nova-compute | 1 + 1 file changed, 1 insertion(+) diff --git a/templates/usr.bin.nova-compute b/templates/usr.bin.nova-compute index 5762473c..dc146af9 100644 --- a/templates/usr.bin.nova-compute +++ b/templates/usr.bin.nova-compute @@ -34,6 +34,7 @@ /dev/ r, /dev/disk/** r, /dev/disk/by-id/* r, + /dev/dm-* r, /dev/mapper/control wr, /dev/nbd* rw, /dev/tty rw,