On Tue, Jun 24, 2025 at 01:25:47PM +0530, Aithal, Srikanth wrote:
> libguestfs: command: run: \ --pid /tmp/libguestfsJamIlZ/passt1.pid
...
> Don't run as root. Changing to nobody...
...
> PID file open: Permission denied
> libguestfs: trace: launch = -1 (error)

In libguestfs we already work around qemu changing its user when we
are running as root:

https://github.com/libguestfs/libguestfs/blob/0991b4dc2124a8d6c3d232663ea3473a0c78f81f/lib/tmpdirs.c#L202

However I think because passt is creating the file, it cannot write
into the 0755 directory.

Honestly (just as with libvirt / qemu) unilaterally changing the user
ID when running as root is not helping anyone nor adding any security.

As for working around the bug, just don't run virt-customize as root.
There's no need to run guestfs tools as root, unless for some reason
you need to edit a disk image which is only accessible by root.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.  http://libguestfs.org
_______________________________________________
Libguestfs mailing list -- guestfs@lists.libguestfs.org
To unsubscribe send an email to guestfs-le...@lists.libguestfs.org

Reply via email to