mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-08-27 19:11:16 +00:00
Users may want to run the init command of a container as a special user / group. This is achieved by adding <inituser> and <initgroup> elements. Note that the user can either provide a name or an ID to specify the user / group to be used. This commit also fixes a side effect of being able to run the command as a non-root user: the user needs rights on the tty to allow shell job control. Reviewed-by: Daniel P. Berrange <berrange@redhat.com>
32 lines
867 B
XML
32 lines
867 B
XML
<domain type='lxc'>
|
|
<name>jessie</name>
|
|
<uuid>e21987a5-e98e-9c99-0e35-803e4d9ad1fe</uuid>
|
|
<memory unit='KiB'>1048576</memory>
|
|
<currentMemory unit='KiB'>1048576</currentMemory>
|
|
<vcpu placement='static'>1</vcpu>
|
|
<resource>
|
|
<partition>/machine</partition>
|
|
</resource>
|
|
<os>
|
|
<type arch='x86_64'>exe</type>
|
|
<init>/sbin/sh</init>
|
|
<inituser>tester</inituser>
|
|
<initgroup>1234</initgroup>
|
|
</os>
|
|
<clock offset='utc'/>
|
|
<on_poweroff>destroy</on_poweroff>
|
|
<on_reboot>restart</on_reboot>
|
|
<on_crash>restart</on_crash>
|
|
<devices>
|
|
<emulator>/usr/libexec/libvirt_lxc</emulator>
|
|
<filesystem type='mount' accessmode='passthrough'>
|
|
<source dir='/mach/jessie'/>
|
|
<target dir='/'/>
|
|
</filesystem>
|
|
<console type='pty'>
|
|
<target type='lxc' port='0'/>
|
|
</console>
|
|
</devices>
|
|
<seclabel type='none'/>
|
|
</domain>
|