Is there a way to allow non sudo users access to KVM QEMU virtual machines in CentOS 7? I want to allow a non-root user to manage KVM guest virtual machines without having sudo access. Mainly, I'd like the user to be able to run virsh commands such as:

virsh list --all
virsh start UUID

I tried adding the user to the libvirt group, but that didn't work. I checked policy kit rules in /etc/polkit-1/rules.d, and I followed these directions as well:

https://goldmann.pl/blog/2012/12/03/con ... t-manager/ https://major.io/2015/04/11/run-virsh-a ... ular-user/

Neither of these worked. Is there a way to do this, and if so, how?

  • You do realize that you can and actually should configure sudo to run only a specific set of commands? – HBruijn May 20 '16 at 5:10
  • serverfault.com/a/739614/126632 Non-root users always have to specify the connection URI, even if granted access in PolicyKit. – Michael Hampton May 20 '16 at 9:58

Hidden in the comments at https://major.io/2015/04/11/run-virsh-a is

export LIBVIRT_DEFAULT_URI=qemu:///system

This works for me but may give more access than you want.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.