Hi, According to the comment of virConnectOpenReadOnly, this function has some restrictions on available methods to control domains. Could you be more specific? What kind of restrictions we are having (compare to virConnectOpen())? And when should we use virConnectOpenReadOnly() instead of virConnectOpen() ? Thanks, Jun