[libvirt] fc12 virsh tap device problem

[Daniel P. Berrange]

On Tue, Dec 08, 2009 at 07:07:33PM -0800, Chiradeep Vittal wrote:
> I have this xml:
> <domain type='kvm'>
>   <name>centos</name>
>   <uuid>22d9d573-d82c-c18d-36c0-d3ffef057468</uuid>
>   <memory>131072</memory>
>   <vcpu>1</vcpu>
>   <os>
>     <type arch='x86_64'>hvm</type>
>   </os>
>   <features>
>     <acpi/>
>     <pae/>
>   </features>
>   <clock offset='utc'/>
>   <devices>
>     <emulator>/usr/bin/qemu-kvm</emulator>
>     <disk type='file' device='disk'>
>       <source file='/var/lib/images/centos.5-4.x86-64/centos-small.img'/>
>       <target dev='hda' bus='ide'/>
>     </disk>
>     <interface type='user'>
>       <mac address='52:54:00:7e:5b:58'/>
>     </interface>
>     <interface type='ethernet'>
>       <mac address='52:54:00:2e:33:c8'/>
>       <script path='/var/lib/images/centos.5-4.x86-64/qemu-ifup'/>
>     </interface>

The execution of scripts does not currently work, since we started using libcap-ng
to drop all capabilities on QEMU. It will be denied any access to create TAP devices
even when running as rot. You need to switch to bridge/network type interfaces which
makes libvirt configure the TAP device on QEMU's behalf.

>     <graphics type='vnc' port='5910' autoport='no' listen=''/>
>   </devices>
> </domain>


Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|