-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Sun, Jun 12, 2016 at 12:57:19PM -0700, [email protected] wrote: > > > > Hi Marek, > > Mounting as you advised works like charm when doing it via Qubes VM Manager: > "qrexec-client-vm dom0 storage.block.attach" from rc.local of appvm. > > But when setting 'storage' VM to auto-start I find such things in the log > (and no storage is attached: > ---- > 125626-Jun 12 18:27:11 dom0 qvm-start[2666]: Waiting for VM's qrexec > agent......connected > 125709-Jun 12 18:27:11 dom0 systemd[1]: Started Start Qubes VM storage. > 125774:Jun 12 18:27:12 dom0 storage.block.attach-storage[3328]: *** Running > this tool as root is strongly discouraged, this will lead you in permissions > problems. > 125930:Jun 12 18:27:12 dom0 storage.block.attach-storage[3328]: Retry as > unprivileged user. > 126015:Jun 12 18:27:12 dom0 storage.block.attach-storage[3328]: ... or use > --force-root to continue anyway. > 126116-Jun 12 18:27:13 dom0 qvm-start[2668]: Waiting for VM's qrexec > agent......connected > 126199-Jun 12 18:27:13 dom0 systemd[1]: Started Start Qubes VM sys-whonix. > ---- > > Obviously this is the appvm->dom0 call. > Calling "qrexec-client-vm dom0 storage.block.attach" as "user" does not help. > I'm not sure which "this tool" is (called command) and how can I run it as > non-root (or with --force option) during dom0 boot time. > > Any ideas how to workaround it?
When VM is autostarted, all services from it are started as root. This is some obscure interaction of how VM is started, which will be improved in Qubes 3.2. For now, you can add --force-root option to qvm-block command in your script. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXXb91AAoJENuP0xzK19csqeIH/2eIn1SN45FSD4ImyBwwSndX VkXbDOzCM/Yxi1a0wjZNqvxOsnleljTNkRb4nFru/l5NUWx6oYzXQ9cK8epHBPPk s08aZaMY5N9KDRDebK6ucmZjYFHAKMhUMVHHUPT8dXWJyg8eUZTXW5T+5mN2wmfb Ynjx1kpsq0ZcTroAwsqgeNZfY1cKRV44UOFqsTtXlvxllviVOfTRjkvv7kJqdkC1 Mgn19NcO/DbxZ2Rgid+38NZtZCcX1QDuYKcKavrArP8K63Ju88eEFZksMdPIncy1 LwSFlL0RhY/bAqLFmd5UeSPSIpd91j82lqkWOKE4CxP5mvPqH3qZzKNJ8wVPzfQ= =p8Oq -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160612200052.GL1593%40mail-itl. For more options, visit https://groups.google.com/d/optout.
