#1042429 libvirt-daemon-system: VM running but virt-manager not connecting

Package:
libvirt-daemon-system
Source:
libvirt-daemon-system
Description:
Libvirt daemon configuration files
Submitter:
Andreas Guenther
Date:
2023-08-19 15:24:03 UTC
Severity:
normal
#1042429#5
Date:
2023-07-28 07:21:42 UTC
From:
To:
Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***
   After starting, the Virt-manager window remains empty and instead shows the message "QEMU/KVM - Not Connected".

   * What led up to the situation?
     System upgrade from Debian 11 to Debian 12

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
     Copy the file /var/lib/polkit-1/localauthority/10-vendor.d/60-libvirt.pkla from the package of the same name in Buster to the same place on the Bookworm installation. Restart libvirtd.
   * What was the outcome of this action?
     The virt-manager works as usual again
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***

#1042429#10
Date:
2023-08-19 14:44:47 UTC
From:
To:
This is surprising, as the version of polkit that comes with Debian
12 is capable of using JavaScript rules.

For libvirt that's /usr/share/polkit-1/rules.d/60-libvirt.rules,
which implements the same logic as the pkla rules did in previous
releases, namely that members of the "libvirt" group should be
allowed to manage the system instance of libvirtd.

I have tried just now with a fresh installation of Debian 12 and
everything seems to work as intended.

This doesn't look right for Debian 12, you should be running 6.1.0.

Is it possible that you haven't rebooted the machine after performing
the upgrade? The new version of polkit, which can read the JavaScript
rules, will only take over at that point, so if you haven't rebooted
yet it would make sense that the pkla rules disappearing would cause
the currently running version of polkit to no longer grant you access
to libvirt.

This version of polkit should be perfectly able to process the
JavaScript version of the rules.