On 07/07/2014 02:11 PM, John wrote:
Here is what I got.
root ubuntu:/home/john# virsh start ubuntu2
error: Failed to start domain ubuntu2
error: internal error Process exited while reading console log output: char
device redirected to /dev/pts/1
bind(unix:/var/lib/libvirt/qemu/ubuntu2.libguestfs): Permission denied
chardev: opening backend "socket" failed: Permission denied
When I deleted the <channel>...</channel> part, it will start normally. But
I
need it to use guestfish with --live option.
No SELinux or AppArmor is used. qemu.conf shows it's running by root user. I
did "virsh start" operation under root and the error remains. Should I change
the permission attributes of files under /var/lib/libvirt/qemu ?
Yes, it should be writable to root. (I don't know what the default user/group
for qemu are on ubuntu).
Even when libvirt runs qemu as root, it drops some capabilities like
CAP_DAC_OVERRIDE, which allows root to open any file regardless of permissions.
Jan