Hi, I'm running the latest libvirt 0.9.9.

I'm trying to start a VIF of type "Ethernet". I know there are problems with 
that because you need to be root in order to control the tun/tap driver.

I changed my qemu.conf file to

user = "root"
group = "root"
clear_emulator_capabilities = 0

However, I still get an error when trying to start my VM:

[root]# virsh start vm-0-3
error: Failed to start domain vm-0-3
error: internal error process exited while connecting to monitor: 
qemu-system-x86_64: -net 
tap,ifname=vif-0-3,script=/etc/libvirt/qemu/vif-vnet-up,vlan=0,name=hostnet0: 
could not open /dev/net/tun: Operation not permitted
qemu-system-x86_64: -net 
tap,ifname=vif-0-3,script=/etc/libvirt/qemu/vif-vnet-up,vlan=0,name=hostnet0: 
Device 'tap' could not be initialized

I run the latest qemu-kvm.

The permissions on the tun device are set to default settings and my scripts 
are executable by anyone:

[root ~]# ll /dev/net/tun 
crw-rw---- 1 root root 10, 200 Jan 20 15:39 /dev/net/tun

[root ~]# ll /etc/libvirt/qemu/vif-vnet-*
-rwxrwxrwx 1 root root 150 Jan 17 15:52 /etc/libvirt/qemu/vif-vnet-down
-rwxrwxrwx 1 root root 137 Jan 19 17:51 /etc/libvirt/qemu/vif-vnet-up

Any idea what I'm doing wrong here? I have actually also compiled libvirt with 
--without capng, so it should not drop capabilities anyway. Why does it not run 
as root?

Thanks,
Anna

_______________________________________________
libvirt-users mailing list
libvirt-users@redhat.com
https://www.redhat.com/mailman/listinfo/libvirt-users

Reply via email to