[libvirt-users] spice session locking

[Michal Privoznik]

On 16.02.2015 14:09, Jon Doe wrote:
> Any idea how to do this with virsh or hooks? Qemu seems to have a
> spice.set_ticket command, but calling this from virsh's
> 'qemu-monitor-command guest --hmp --cmd spice.set_ticket password'
> doesn't work.

No, that won't work, because apparently, Qemu/SPICE folks have thought
that if SPICE was started without a password, it's meant to be open and
therefore password cannot be set afterward. Or vice versa - if SPICE was
started with a password, it can't be removed. But yes, it can be changed.

Moreover, you certainly don't want to bypass libvirt on this. We have an
attribute for that //graphics/@passwd.

> 
> The password would somehow have to be reset once the client logs out.

Yep, that's how RHEV does it.

You can set the password in domain XML, and set it to timeout shortly
(//graphoics/@passwdValidTo).

Michal