Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Peter Crowther
On Tue, 30 Apr 2019 at 16:43, Michal Privoznik wrote: > Long story short, why bother with /system if you can't use it and not > use /session instead? > > Because according to the FAQ, /session isn't suitable for my use: - You will definitely want to use qemu:///system if your VMs are acting

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Michal Privoznik
On 4/30/19 3:15 PM, Peter Crowther wrote: On Tue, 30 Apr 2019 at 10:48, Daniel P. Berrangé wrote: On Tue, Apr 30, 2019 at 10:45:03AM +0100, Peter Crowther wrote: On Tue, 30 Apr 2019 at 10:40, Michal Privoznik wrote: Is there any problem running libvirtd as root? Yes, in the regulated

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Peter Crowther
On Tue, 30 Apr 2019 at 10:48, Daniel P. Berrangé wrote: > On Tue, Apr 30, 2019 at 10:45:03AM +0100, Peter Crowther wrote: > > On Tue, 30 Apr 2019 at 10:40, Michal Privoznik > wrote: > > > > > Is there any problem running libvirtd as root? > > > > > > Yes, in the regulated environment in which I

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Daniel P . Berrangé
On Tue, Apr 30, 2019 at 10:48:51AM +0100, Daniel P. Berrangé wrote: > On Tue, Apr 30, 2019 at 10:45:03AM +0100, Peter Crowther wrote: > > On Tue, 30 Apr 2019 at 10:40, Michal Privoznik wrote: > > > > > Is there any problem running libvirtd as root? > > > > > > Yes, in the regulated environment

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Daniel P . Berrangé
On Tue, Apr 30, 2019 at 10:45:03AM +0100, Peter Crowther wrote: > On Tue, 30 Apr 2019 at 10:40, Michal Privoznik wrote: > > > Is there any problem running libvirtd as root? > > > > Yes, in the regulated environment in which I work! I have to do far more > thorough threat analysis than I would

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Peter Crowther
On Tue, 30 Apr 2019 at 10:40, Michal Privoznik wrote: > Is there any problem running libvirtd as root? > > Yes, in the regulated environment in which I work! I have to do far more thorough threat analysis than I would do if I knew which capabilities it had. So far, we've accepted the extra

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Michal Privoznik
On 4/29/19 5:42 PM, lameventa...@gmail.com wrote: On 29/04/2019 22.01, Michal Privoznik wrote: On 4/29/19 1:06 PM, lameventa...@gmail.com wrote: I want to run libvirtd as a special user, and allowing users that belong to a special group to connect via qemu+unix:///system (eg: unix socket).

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-30 Thread Daniel P . Berrangé
On Tue, Apr 30, 2019 at 12:42:11AM +0900, lameventa...@gmail.com wrote: > > > On 29/04/2019 22.01, Michal Privoznik wrote: > > On 4/29/19 1:06 PM, lameventa...@gmail.com wrote: > >> I want to run libvirtd as a special user, and allowing users that belong > >> to a special group to connect via

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-29 Thread lameventanas
On 29/04/2019 22.01, Michal Privoznik wrote: > On 4/29/19 1:06 PM, lameventa...@gmail.com wrote: >> I want to run libvirtd as a special user, and allowing users that belong >> to a special group to connect via qemu+unix:///system (eg: unix socket). >> >> I did everything necessary to do so:

Re: [libvirt-users] libvirtd via unix socket using system uri

2019-04-29 Thread Michal Privoznik
On 4/29/19 1:06 PM, lameventa...@gmail.com wrote: I want to run libvirtd as a special user, and allowing users that belong to a special group to connect via qemu+unix:///system (eg: unix socket). I did everything necessary to do so: created a libvirt user and group, added the libvirt user to

[libvirt-users] libvirtd via unix socket using system uri

2019-04-29 Thread lameventanas
I want to run libvirtd as a special user, and allowing users that belong to a special group to connect via qemu+unix:///system (eg: unix socket). I did everything necessary to do so: created a libvirt user and group, added the libvirt user to the kvm group, added my normal user to the libvirt