Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable non-root sessions #22

Open
bryteise opened this issue Sep 27, 2020 · 5 comments
Open

Enable non-root sessions #22

bryteise opened this issue Sep 27, 2020 · 5 comments

Comments

@bryteise
Copy link

Currently libvirt is running cloud-hypervisor as root and fails to launch otherwise. Need to move to non-root usage of cloud-hypervisor instead.

@sboeuf
Copy link
Member

sboeuf commented Sep 28, 2020

What's the reason CH is failing to run without root permissions? The ones that comes to mind are either /dev/kvm is not in the right group or the libvirt user is not part of this group, preventing it from accessing the KVM device. Or maybe you're missing some capabilities for creating the TAP device (CAP_NET_ADMIN should work).

@bryteise
Copy link
Author

This is because libvirt only will run cloud-hypervisor if it is root (hard check in the current implementation). Resolving that part is simple but I need to ensure it works with the new daemon implementation.

@sboeuf
Copy link
Member

sboeuf commented Sep 28, 2020

@bryteise oh I see, are you saying that the current libvirt/ch driver is obsolete? And that we have to rely on a "new" way of writing libvirt drivers, which translates into "we need a dedicated daemon"?

@bryteise
Copy link
Author

Yes, basically #24 needs to be implemented so the ch driver works like the qemu driver.

@sboeuf
Copy link
Member

sboeuf commented Sep 28, 2020

Gotcha!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants