Allow a user to stop and start one guest VM

Allow a user to stop and start one guest VM

[Neil Aggarwal]

Hello:

One of my customers asked for access to stop and start
their guest VM.  

Right now, I can do that using virsh, but I do not want
to give this customer the ability to stop and start
all VMs running on the host.

Is there a way to give stop and start control of one
VM to someone?

I am using KVM on a CentOS 5.5 host.

Thanks,
	Neil

--
Neil Aggarwal, (281)846-8957
FREE trial: Virtualmin VPS with unmetered bandwidth
http://UnmeteredVPS.net/virtualmin

Re: Allow a user to stop and start one guest VM

[Daniel P. Berrange]

On Tue, Jul 20, 2010 at 08:01:15AM -0500, Neil Aggarwal wrote:
> Hello:
> 
> One of my customers asked for access to stop and start
> their guest VM.  
> 
> Right now, I can do that using virsh, but I do not want
> to give this customer the ability to stop and start
> all VMs running on the host.
> 
> Is there a way to give stop and start control of one
> VM to someone?

Fine grained role based access control is not available at the
libvirt/virsh level. It is currently something that must be
provided by the management layer above libvirt. We intend to
add this capability directly into libvirt in the future, but
there's no firm ETA. So in the immediate term you'd need to
write a small tool using libvirt APIs to delegate stop/start
operations to users you desire


Regards,
Daniel
-- 
|: Red Hat, Engineering, London    -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org -o- http://virt-manager.org -o- http://deltacloud.org :|
|: http://autobuild.org        -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|