qubes-issues icon indicating copy to clipboard operation
qubes-issues copied to clipboard

Error when starting anon-whonix: "Qube anon-whonix has failed to start: internal error: libxenlight failed to create new domain ‘anon-whonix’"

Open qqubes opened this issue 3 years ago • 6 comments

Qubes OS release

4.1

Brief summary

This issue is possibly two similar but separate issues. It/they were reported in the Qubes forums:

I’ve seen the following two issues recur a number of times:

  1. When I try to start anon-whonix a popup with the following error appears:

Qube anon-whonix has failed to start: internal error: libxenlight failed to create new domain ‘anon-whonix’

  1. I can start anon-whonix, but it fails the connectivity test, i.e. the IP Check on the Whonix welcom page. Shutting down the qube and restarting it does not help.

The only way I know to fix either of these is to restart the computer.

Could it possibly be related to issue-1269902751?

Steps to reproduce

As described this only happens intermittently and is unpredictable.

Expected behavior

anon-whonix starts up properly.

Actual behavior

qqubes avatar Jul 22 '22 17:07 qqubes

Every issue must be about a single, actionable thing. Adjusting this issue to be only about the first problem described.

andrewdavidwong avatar Jul 22 '22 20:07 andrewdavidwong

FWIW, "internal error: libxenlight failed to create new domain" is a very common error message:

https://github.com/QubesOS/qubes-issues/issues?q=%22internal+error%3A+libxenlight+failed+to+create+new+domain%22

andrewdavidwong avatar Jul 22 '22 20:07 andrewdavidwong

FWIW, "internal error: libxenlight failed to create new domain" is a very common error message:

https://github.com/QubesOS/qubes-issues/issues?q=%22internal+error%3A+libxenlight+failed+to+create+new+domain%22

This error basically means, “something went wrong in libxl, look at libxl logs for details”. It should really be replaced with a better error message, ideally one that actually indicates what happened in libxl. Right now it is basically a useless catchall.

DemiMarie avatar Jul 23 '22 03:07 DemiMarie

This error basically means, “something went wrong in libxl, look at libxl logs for details”. It should really be replaced with a better error message, ideally one that actually indicates what happened in libxl. Right now it is basically a useless catchall.

I'm not sure where I can find the libxl logs so that I can check them next time this happens?

qqubes avatar Jul 23 '22 06:07 qqubes

[Edit: Removed link to a kernel bug that, on second look, only affected my experimental setup]

I'm not sure where I can find the libxl logs so that I can check them next time this happens?

/var/log/libvirt/libxl/libxl-driver.log

rustybird avatar Jul 23 '22 09:07 rustybird

Issue (2) just occurred after a suspend and resume, which others have reported in the forum.

I notice that the padlock is not even responsive. So I tried to stop sys-whonix, but it gives an error. journalctl says (I cannot copy & paste the whole output from dom0): internal error: Failed to shutdown domain '6' with libxenlight.

Nothing in libxl logs for this second case.

qqubes avatar Jul 23 '22 19:07 qqubes

For issue tracking purposes:

  • Affects Qubes-Whonix: Yes, as reported.
  • Caused by Whonix-Whonix source code: Highly unlikely.
  • This is primarily a Qubes dom0 issue.

Feature request:

  • Improve the error message, automatically collect any logs the user should append to this bug report to make it actionable by developers.

adrelanos avatar Oct 24 '23 10:10 adrelanos

Feature request:

  • Improve the error message, automatically collect any logs the user should append to this bug report to make it actionable by developers.

Unfortunately the error message (which comes from libvirt) is absolutely terrible. Somewhere the actual error gets swallowed before qubesd gets it.

IMO this needs to be fixed so that the actual error is somewhat self-contained.

DemiMarie avatar Oct 24 '23 21:10 DemiMarie