[libvirt] [PATCH v2] qemu: Introduce caching whether /dev/kvm is accessible

[Pavel Hrdina]

On Mon, Nov 12, 2018 at 12:50:41PM +0100, Marc Hartmayer wrote:
> On Thu, Nov 01, 2018 at 09:31 AM +0100, Martin Kletzander <mkletzan at redhat.com> wrote:

[...]

> How can you run a machine/QEMU VM under a different user:group other
> than changing the user:group in qemu.conf and restart/reload libvirtd?
> 
> As soon as a VM is running we have not to verify /dev/kvm access, no?
> (so there should be no problem when libvirtd tries to “reconnect” to
> already running VMs).

You can add this into your domain XML:

  <seclabel type='static' model='dac' relabel='yes'>
    <label>phrdina:phrdina</label>
  </seclabel>

And it will run the qemu process under that user.

Pavel
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20181112/f971fbea/attachment-0001.sig>