[opensuse-virtual] outdated docs, kvm/libvirtd auth changes in 12.2
While reading through the KVM documentation I noticed that the current version of openSuSE does not have the referenced polkit-auth anymore: http://doc.opensuse.org/documentation/html/openSUSE/opensuse-kvm/cha.libvirt... Has polkit-auth a replacement in 12.2? For my own testing with libguestfs all it takes is to add the user to the group 'kvm' for the attach-method 'libvirt', so I dont really need polkit-auth. Olaf -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
Olaf Hering wrote:
While reading through the KVM documentation I noticed that the current version of openSuSE does not have the referenced polkit-auth anymore:
http://doc.opensuse.org/documentation/html/openSUSE/opensuse-kvm/cha.libvirt...
Yeah, that applies to SLES11, but not for openSUSE since 11.2 or so. I created a comment about this outdated info as per the feedback instructions in "About This Manual".
Has polkit-auth a replacement in 12.2?
polkit-auth is part of the PolicyKit package, which was replaced with polkit in openSUSE long ago. Better documentation for using polkit is here http://wiki.libvirt.org/page/SSHPolicyKitSetup
For my own testing with libguestfs all it takes is to add the user to the group 'kvm' for the attach-method 'libvirt', so I dont really need polkit-auth.
Your normal user can do stuff like 'virsh -c qemu+ssh:///system' without configuring polkit as per the libvirt wiki? On my 12.2 machine, I must add the following to authenticate to the system URI (even when user jfehlig is a member of libvirt, kvm, and qemu groups) # cat /etc/polkit-1/localauthority/50-local.d/50-libvirt-remote-access.pkla [Remote libvirt SSH access] Identity=unix-user:jfehlig Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes ResultActive=yes -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
On Thu, Oct 11, Jim Fehlig wrote:
Your normal user can do stuff like 'virsh -c qemu+ssh:///system' without configuring polkit as per the libvirt wiki? On my 12.2 machine, I must add the following to authenticate to the system URI (even when user jfehlig is a member of libvirt, kvm, and qemu groups)
Thanks, that helped for virsh. Olaf -- To unsubscribe, e-mail: opensuse-virtual+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-virtual+owner@opensuse.org
participants (2)
-
Jim Fehlig -
Olaf Hering