[libvirt-users] spice session locking

[Jon Doe]

Any idea how to do this with virsh or hooks? Qemu seems to have a
spice.set_ticket command, but calling this from virsh's
'qemu-monitor-command guest --hmp --cmd spice.set_ticket password'
doesn't work.

The password would somehow have to be reset once the client logs out.

On Mon, Feb 16, 2015 at 11:50 AM, Michal Privoznik <mprivozn at redhat.com> wrote:
> On 13.02.2015 16:19, Jon Doe wrote:
>> Hi List,
>>
>> Is it possible to prevent other clients from stealing my libvirtd
>> hosted spice session? This is a problem for me where multiple
>> co-workers access the same guest over a qemu+ssh:// connection.
>> Instead of simply disconnecting clients, I'd like libvirtd to deny the
>> new client.
>>
>> I've been looking at polkit acl rules and the vnc sharePolicy
>> attribute but so far no luck.
>>
>
> I think the only possible way is to set a password to protect the SPICE
> session. You know, libvirt doesn't interfere into SPICE connection
> process. And the sharePolicy attribute exists only for VNC. SPICE
> doesn't seem to support that.
>
> Michal