dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

r/vmhost: Disable DynamicUsers for vm-autostart 

_libvirt_ has gone full Polkit, which doesn't work with systemd dynamic
users.  So, we have to run `vm-autostart` as root (with no special
OS-level privileges) in order for Polkit to authorize the connection to
the daemon socket.
unifi-restore
Dustin 2025-07-28 18:18:35 -05:00
parent a63ee2bff5
commit 4df047cf76
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/vmhost/files/vm-autostart.service
View File

@ -12,8 +12,6 @@ Environment=LIBVIRT_DEFAULT_URI=qemu:///system
ExecStart=/usr/local/libexec/vm-autostart.sh ExecStart=/usr/local/libexec/vm-autostart.sh
Restart=on-failure Restart=on-failure
DynamicUser=yes
SupplementaryGroups=libvirt
CapabilityBoundingSet= CapabilityBoundingSet=
DeviceAllow= DeviceAllow=
DevicePolicy=closed DevicePolicy=closed