Good day.


How I can run KVM w/ network support under normal user?

When I try to raise up an interface (br0 in my case), I get:

$ /sbin/ifup br0
/sbin/ifup: failed to open temporary statefile /etc/network/run/.ifstate.tmp: Permission denied

$ sudo chmod 666 /etc/network/run/ifstate
- Is it safe?!

$ /sbin/ifup br0
/sbin/ifup: failed to open temporary statefile /etc/network/run/.ifstate.tmp: Permission denied

$ sudo chmod 666 /etc/network/run/.ifstate.tmp
chmod: cannot access `/etc/network/run/.ifstate.tmp': No such file or directory
- Probably a run time thing...

So, how I do it safe way?!

Thanks for Your time.

PS Please, reply to the list.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Dne, 04. 01. 2010 07:48:53 je Sthu Deus napisal(a):

Good day.


How I can run KVM w/ network support under normal user?



I don't know about network support, but to run kvm you have to add your
user to the kvm group. Unfortunately, I don't recall anymore if that
gets set up automagically when you apt-get kvm, or you have to do it
manually ...


--
Regards,

Klistvud
Certifiable Loonix User #481801
http://bufferoverflow.tiddlyspot.com


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Sthu Deus <sthu.deus@gmail.com> wrote:
> How I can run KVM w/ network support under normal user?

http://www.linux-kvm.org/page/Networking

Chris


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Tue, Jan 05, 2010 at 08:58:49AM +0000, Chris Davies wrote:
> Sthu Deus <sthu.deus@gmail.com> wrote:
> > How I can run KVM w/ network support under normal user?
>
> http://www.linux-kvm.org/page/Networking

This page is very good, but the instructions under "public
bridge" are not applicable to Debian.

I have a public bridge setup on Debian for KVM VMs. I have
network access via Ethernet, using interface 'eth0'. I have
the following /etc/network/interfaces:

<begin>
iface eth0 inet manual

auto br0
iface br0 inet dhcp
pre-up /usr/sbin/tunctl -u jon -t tap0
pre-up ifconfig tap0 up
bridge_ports all tap0
post-down ifconfig tap0 down
post-down tunctl -d tap0
<end>

"tunctl" is in the 'uml-utilities' package. You will also
need the 'bridge-utils' package.

In this case, I run my VM as the user 'jon'. This is
reflected in the '-u jon' argument to tunctl.

Once you've restarted networking, you should then use
arguments such as the following to kvm:

-net nic -net tap,ifname=tap0,script=no

I prefer this method to specifying a script argument, and
having to give priviledges to that.

--
Jon Dowland

Thank You for Your time and answer, Klistvud:

>I don't know about network support, but to run kvm you have to add your
>user to the kvm group. Unfortunately, I don't recall anymore if that
>gets set up automagically when you apt-get kvm, or you have to do it
>manually ...

I have kvm-acceleration for linux VMs at least and I have the user I run under to be in the KVM-group. But I'm asking on bridge bringing up - in which case it is necessary at least for now to have root privileges - and I do not know how I can do this under normal user.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

On Tue, Jan 05, 2010 at 08:58:49AM +0000, Chris Davies wrote:
> http://www.linux-kvm.org/page/Networking

Jon Dowland <jon+debian-user@alcopop.org> wrote:
> This page is very good, but the instructions under "public
> bridge" are not applicable to Debian.

It's also irrelevant to the OP's request for networking as a "normal
user". For the sake of clarity here, the OP just needs to add "-net nic
-net user" to the kvm command line. This will provide networking access
to the guest as if it were NATted behind the host. There are additional
options to punch specific ports through to the guest.

If, however, the OP can get root access to configure a bridge as per
your recommendation, then yours is definitely the better option, as it
allows transparent networking to take place, as if the guest were on
the real physical network.

Cheers,
Chris


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org