There was no entry in kern.log for AppArmor. Thanks I'll look at the qemu lists.

On Tue, Jan 6, 2015 at 3:27 PM, Eric Blake <eblake@redhat.com> wrote:
On 01/06/2015 02:03 PM, Jon Schipp wrote:
> Hello all, I'm trying to create an online internal snapshot to work with
> Cuckoo Sandbox.
> I keep receiving this -22 error below on my Ubuntu system and I'm out of
> ideas, been at it for a while so any help is appreciated.
>
> root@cuckoo-sec:~# virsh snapshot-create-as cuckoo cuckoo-snap1 "Cuckoo
> Snapshot"
> error: operation failed: Error -22 while writing VM

That message comes from qemu (file a bug report with them for
poor-quality error message; looks like someone forgot to convert a
negative value back into a positive EINVAL errno value).

As for why qemu is seeing an EINVAL, I have to wonder if it is a case of
AppArmor blocking access to a file.  But that's weird, as internal
snapshots don't normally need to open any additional files.  At any
rate, it's more likely to be a qemu bug than a libvirt one.

--
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org




--
Jon Schipp, 
jonschipp.com, sickbits.netopennsm.ncsa.illinois.edu