[libvirt-users] Console access for a user.

[Martin Kletzander]

On Sat, Dec 27, 2014 at 04:05:30PM +0100, Le Bris Gilles wrote:
>Hi,
>
>I would like to allow a user (non-root) to access the console of his VM
>(he's got root access on it).
>Using sudo doesn't seem to work:
> /bin/virsh console vm
> error: failed to get domain 'vm'
> error: Domain not found: no domain with matching name 'vm'
>If I assign suid to virsh, I get: 'error: Failed to initialize libvirt'
>

When you are running virsh as a non-root, you are connecting to the
session interface by default.  Use 'virsh uri' to see where you are
connecting.  You need to use 'virsh -c qemu:///system' to connect to
the system daemon (the default can be set in
~/.config/libvirt/libvirt.conf).

To configure which user has access to the system daemon, see the
configuration options in /etc/libvirt/libvirtd.conf (there are various
authentication and permission options).  For fine grained ACLs you can
use e.g. polkit, see http://libvirt.org/aclpolkit.html

Martin

>I don't see any information on Internet about this.
>What is the procedure to follow to get this result (QEMU conf, libvirt
>conf, etc)?
>
>Thank you in advance.

>_______________________________________________
>libvirt-users mailing list
>libvirt-users at redhat.com
>https://www.redhat.com/mailman/listinfo/libvirt-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20150102/70911c3f/attachment.sig>