Thanks for answers,but as I see libvirt call ovs-vsctl that tries to connect to ovs-vswitchd socket,that have rw to root.how can I specify socket permissions in vswitchd? <div class="gmail_quot<blockquote class=" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Thu, Mar 06, 2014 at 02:05:15PM +0400, Vasiliy Tolstov wrote: > Hello! How can i operate with openvswitch without root rights? > For example - i can add my user to kvm group and create vm from > libvirt with my own user, but now i'm failed with creating port. > > errors in logs: > Mar 06 14:04:46 <a href="http://selfip.ru" target="_blank">selfip.ru</a> ovs-vsctl[19065]: > ovs|00001|vsctl|INFO|Called as ovs-vsctl --timeout=5 -- --if-exists > del-port > Mar 06 14:04:46 <a href="http://selfip.ru" target="_blank">selfip.ru</a> ovs-vsctl[19065]: > ovs|00002|vsctl|ERR|'del-port' command requires at least 1 arguments > Mar 06 14:04:46 <a href="http://selfip.ru" target="_blank">selfip.ru</a> libvirtd[6418]: internal error: Child > process (ovs-vsctl --timeout=5 -- --if-exists del-port) unexpected > exit status 1: ovs-vsctl: 'del-port' command requires at least 1 > arguments > Mar 06 14:04:46 <a href="http://selfip.ru" target="_blank">selfip.ru</a> libvirtd[6418]: Unable to delete port (null) > from OVS: Operation not permitted I assume that any admin commands related to OVS will require CAP_NET_ADMIN as is required for all non-OVS network tasks too, which pretty much means you have to be root. Regards, Daniel -- |: <a href="http://berrange.com" target="_blank">http://berrange.com</a> -o- <a href="http://www.flickr.com/photos/dberrange/" target="_blank">http://www.flickr.com/photos/dberrange/</a> :| |: <a href="http://libvirt.org" target="_blank">http://libvirt.org</a> -o- <a href="http://virt-manager.org" target="_blank">http://virt-manager.org</a> :| |: <a href="http://autobuild.org" target="_blank">http://autobuild.org</a> -o- <a href="http://search.cpan.org/~danberr/" target="_blank">http://search.cpan.org/~danberr/</a> :| |: <a href="http://entangle-photo.org" target="_blank">http://entangle-photo.org</a> -o- <a href="http://live.gnome.org/gtk-vnc" target="_blank">http://live.gnome.org/gtk-vnc</a> :| </div>