search for: filecap

...hot via shell i get: virsh snapshot-create-as --domain win7new win7new-snap1 --disk-only --atomic --quiesce error: Guest agent is not responding: Guest agent not available for now I use gentoo on the Host. qemu is built with useflags: aio alsa caps curl fdt filecaps gtk iscsi jpeg lzo ncurses nls numa pin-upstream-blobs png python sdl seccomp smartcard ssh threads tls usb usbredir uuid vde vhost-net virtfs vnc xattr xfs libvirt: audit caps fuse iscsi libvirtd lvm lxc macvtap nls numa parted pcap policykit q...

On 26.02.2014 17:59, Stephan Sachse wrote: >> # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer > > you must "shift" the uids for the container 0 -> 666, 1 -> 667, 2 -> > 668. there is a tool for this: uidmapshift I prepared two containers, the first I used chown, in the second uidmapshift, here is the results. ./uidmapshift -r

...n win7new win7new-snap1 --disk-only > --atomic --quiesce > > error: Guest agent is not responding: Guest agent not available for now > > > > > > I use gentoo on the Host. > > qemu is built with useflags: > aio alsa caps curl fdt filecaps gtk iscsi > jpeg lzo ncurses nls numa pin-upstream-blobs png python sdl seccomp > smartcard ssh threads tls usb usbredir uuid vde > vhost-net virtfs vnc xattr xfs > > > libvirt: audit caps fuse iscsi libvirtd lvm lxc > macvtap n...

...network connections. The Gentoo guests reboots without problem. All the guests have same HW-configuration, only Name/DiskImage/MAC- addresses differ. Here some technical details: Host: Distribution Gentoo Kernel 4.9.95-gentoo Qemu app-emulation/qemu-2.11.1-r2 USE="aio bzip2 caps curl fdt filecaps gnutls jpeg lzo ncurses nls pin-upstream-blobs png sdl seccomp vhost-net vnc xattr" QEMU_SOFTMMU_TARGETS="x86_64" QEMU_USER_TARGETS="x86_64" libvirt app-emulation/libvirt-4.3.0 USE="caps dbus libvirtd nls qemu udev" Guest Distribution Fedora 28 Kernel 4....

...gt; Yes you are right, chown removed capabilities, but ping still works > properly. try it as user and not as root # su -s/bin/bash nobody -c 'ping localhost' ping: icmp open socket: Operation not permitted fix this from outside the container chroot /path/to/rootfs rpm --qf "[%{FILECAPS} %{FILENAMES}\n]" -qa | grep ^= | sed -e 's/^=/setcap/' and paste the output into your terminal /stephan -- Software is like sex, it's better when it's free!