Can't run an arch linux VM on arch linux. Call to qemu-system-x86_64 fails with: There is no option group 'spice'

[digitalsignalperson]

Required information

• Distribution: arch linux
• Distribution version: rolling
• The output of "incus info" (most of it)

  config: {}
  api_status: stable
  api_version: "1.0"
  auth: trusted
  public: false
  auth_methods:
  - tls
  auth_user_name: dbb2a02875c1ed5c2c284c307d51ad737b4d876b853f5a031f511a7e132a7879
  auth_user_method: tls
  environment:
  addresses: []
  architectures:
  - x86_64
  - i686
  driver: lxc | qemu
  driver_version: 5.0.3 | 8.2.0
  firewall: nftables
  kernel: Linux
  kernel_architecture: x86_64
  kernel_features:
  idmapped_mounts: "true"
  netnsid_getifaddrs: "true"
  seccomp_listener: "true"
  seccomp_listener_continue: "true"
  uevent_injection: "true"
  unpriv_fscaps: "true"
  kernel_version: 6.6.12-1-lts
  lxc_features:
  cgroup2: "true"
  core_scheduling: "true"
  devpts_fd: "true"
  idmapped_mounts_v2: "true"
  mount_injection_file: "true"
  network_gateway_device_route: "true"
  network_ipvlan: "true"
  network_l2proxy: "true"
  network_phys_macvlan_mtu: "true"
  network_veth_router: "true"
  pidfd: "true"
  seccomp_allow_deny_syntax: "true"
  seccomp_notify: "true"
  seccomp_proxy_send_notify_fd: "true"
  os_name: Arch Linux
  os_version: rolling
  project: user-1000
  server: incus
  server_clustered: false
  server_event_mode: full-mesh
  server_name: fractal
  server_pid: 53795
  server_version: "0.4"
  storage: dir
  storage_version: "1"
  storage_supported_drivers:
  - name: lvm
  version: 2.03.23(2) (2023-11-21) / 1.02.197 (2023-11-21) / 4.48.0
  remote: false
  - name: zfs
  version: 2.2.2-1
  remote: false
  - name: btrfs
  version: 6.6.3
  remote: false
  - name: dir
  version: "1"
  remote: false

Issue description

Trying to start an arch linux VM on arch linux fails. The call to qemu-system-x86_64 includes "-spice ..." and fails with "Error: Failed to run ... There is no option group 'spice'".

This seems to have been an issue in the past: https://bugs.archlinux.org/task/69582 https://gitlab.com/qemu-project/qemu/-/issues/194

I was running arch VMs on arch with LXD recently without issue (until the image was no longer on their mirrors at the time of incus fork). I thought that I had a working arch VM on incus after that but maybe I was only using containers so far.

Steps to reproduce

On a fresh arch install I'm doing

sudo pacman -S incus
sudo systemctl start incus
sudo systemctl start incus.socket
sudo systemctl start incus-user.socket
sudo incus admin init  # defaults except created a pool with dir backend
sudo usermod -v 1000000-1000999999 -w 1000000-1000999999 root
incus profile unset default raw.idmap  # found from https://wiki.debian.org/Incus will be fixed in the 0.5 release. 

VMNAME=archvm
incus init images:archlinux "$VMNAME" --vm \
    -c security.secureboot=false \
    -c limits.memory=16GiB \
    -c limits.cpu=$(nproc) \
    -c boot.autostart=false
incus start "$VMNAME"

The output of the last command is

Error: Failed to run: forklimits limit=memlock:unlimited:unlimited fd=3 fd=4 -- /usr/bin/qemu-system-x86_64 -S -name archvm -uuid 8f4f9f99-ad42-40ca-a60a-40c627379c2c -daemonize -cpu host,hv_passthrough -nographic -serial chardev:console -nodefaults -no-user-config -sandbox on,obsolete=deny,elevateprivileges=allow,spawn=allow,resourcecontrol=deny -readconfig /var/log/incus/user-1000_archvm/qemu.conf -spice unix=on,disable-ticketing=on,addr=/var/log/incus/user-1000_archvm/qemu.spice -pidfile /var/log/incus/user-1000_archvm/qemu.pid -D /var/log/incus/user-1000_archvm/qemu.log -smbios type=2,manufacturer=LinuxContainers,product=Incus -runas incus: qemu-system-x86_64: -spice unix=on,disable-ticketing=on,addr=/var/log/incus/user-1000_archvm/qemu.spice: There is no option group 'spice'
: signal: segmentation fault (core dumped)
Try `incus info --show-log archvm` for more info

The output of incus info --show-log archvm is

Name: archvm
Status: STOPPED
Type: virtual-machine
Architecture: x86_64
Created: 2024/01/21 19:55 PST
Error: open /var/log/incus/user-1000_archvm/qemu.log: no such file or directory

Information to attach

• [x] Any relevant kernel output (dmesg)
• [x] Container log (incus info NAME --show-log)
• [x] Container configuration (incus config show NAME --expanded)
• [x] Main daemon log (at /var/log/incus/incusd.log)
• [ ] Output of the client with --debug
• [ ] Output of the daemon with --debug (alternatively output of incus monitor --pretty while reproducing the issue)

dmesg during incus start:

[11925.848181] incusbr-1000: port 4(tap45312296) entered blocking state
[11925.848186] incusbr-1000: port 4(tap45312296) entered disabled state
[11925.848200] tap45312296: entered allmulticast mode
[11925.848306] tap45312296: entered promiscuous mode
[11925.894992] qemu-system-x86[69601]: segfault at 28 ip 0000600c2305d474 sp 00007ffd9f334ec0 error 4 in qemu-system-x86_64[600c22a15000+6cb000] likely on CPU 11 (core 3, socket 0)
[11925.895000] Code: 00 00 00 00 00 90 f3 0f 1e fa 53 0f b6 d2 b9 01 00 00 00 48 89 fb 48 83 ec 30 64 48 8b 04 25 28 00 00 00 48 89 44 24 28 31 c0 <48> 8b 47 28 4c 8d 44 24 1f 4c 8d 4c 24 20 48 c7 44 24 20 00 00 00
[11926.095813] tap45312296: left allmulticast mode
[11926.095826] tap45312296: left promiscuous mode
[11926.095906] incusbr-1000: port 4(tap45312296) entered disabled state

incus config show $VNAME --expanded outputs

Error: --expanded cannot be used with a server

No output in /var/log/incus/incusd.log during incus start

[stgraber]

What happens if you run:

qemu-system-x86_64 -spice unix=on,disable-ticketing=on,addr=/tmp/qemu.spice

[digitalsignalperson]

qemu-system-x86_64: -spice unix=on,disable-ticketing=on,addr=/tmp/qemu.spice: There is no option group 'spice'
Segmentation fault (core dumped)

[digitalsignalperson]

Hmm, so must be a non-incus upstream arch or qemu issue? Trying another qemu script that worked until recently has the same issue.

[digitalsignalperson]

sorry not closed. or not sure what the deal is

[stgraber]

pacman -S qemu-base qemu-chardev-spice qemu-hw-usb-redirect qemu-hw-display-virtio-vga qemu-hw-display-virtio-gpu

[stgraber]

Basically ArchLinux seems to have split the QEMU package into a lot of sub-packages, so you need to install all the right bits to make Incus happy. Or use the big hammer and install qemu-full.

[digitalsignalperson]

Thanks! that does the trick