<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hi,</div><div><br></div><div>I am getting some 'permission denied' issues with libvirt/qemu while trying to create new VMs as a non-root user. The username trying to create these new VMs is part of the 'kvm' unix group and the 'kvm' group has rw permissions in the libvirtd.conf as: </div><div>{{{</div><div>unix_sock_group = "kvm"</div><div>unix_sock_rw_perms = "0770"</div><div>}}}</div><div><br></div><div><div>Following is the error I received: </div><div>{{{</div><div>$ virsh create /tmp/clearos2.xml </div><div>23:34:29.227: error : internal error Failed to add tap interface 'vnet%d' to bridge 'br0' : Permission denied</div><div>libvir: QEMU error : internal error Failed to add tap interface 'vnet%d' to bridge 'br0' : Permission denied</div><div>error: Failed to create domain from /tmp/clearos2.xml</div><div>error: internal error Failed to add tap interface 'vnet%d' to bridge 'br0' : Permission denied</div></div><div>}}}</div><div><br></div><div>I don't see any related logs in the libvirtd.log even at debug level. Also, I have used OpenNebula cloud computing toolkit (<a href="http://opennebula.org/">http://opennebula.org/</a>) with this KVM-libvirt install and it is able to create new VMs without root access. The OpenNebula uses libvirt API to interact with hypervisor so I am guessing libvirt configuration is fine. The OpenNebula user is part of the 'kvm' unix group as well and it does not have any other special privileges. </div><div><br></div><div>Is this error coming from qemu or virt-tools/virsh? Any pointers on how to debug this will be really helpful. </div><div><br></div><div>System Info: CentOS 5.5 64-bit, KVM/kvm-qemu 83-164.el5, libvirt 0.6.3-33.el5_5.3. </div><div><br></div><div>Thanks,</div><div>Shantanu. </div></body></html>