services: hurd-vm: Add childhurd user to kvm group.
This is a follow-up to commit d692ebf980
.
* gnu/services/virtualization.scm (%hurd-vm-accounts)[supplementary-groups]:
Add ’kvm’.
* gnu/services/virtualization.scm (hurd-vm-shepherd-service): Use #:group
"kvm"
This commit is contained in:
parent
f2b8abc2a1
commit
04a459a069
1 changed files with 4 additions and 1 deletions
|
@ -974,7 +974,9 @@ is added to the OS specified in CONFIG."
|
||||||
#~(lambda ()
|
#~(lambda ()
|
||||||
(let ((pid (fork+exec-command #$vm-command
|
(let ((pid (fork+exec-command #$vm-command
|
||||||
#:user "childhurd"
|
#:user "childhurd"
|
||||||
#:group "childhurd"
|
;; XXX TODO: use "childhurd" after
|
||||||
|
;; updating Shepherd
|
||||||
|
#:group "kvm"
|
||||||
#:environment-variables
|
#:environment-variables
|
||||||
;; QEMU tries to write to /var/tmp
|
;; QEMU tries to write to /var/tmp
|
||||||
;; by default.
|
;; by default.
|
||||||
|
@ -1005,6 +1007,7 @@ is added to the OS specified in CONFIG."
|
||||||
(user-account
|
(user-account
|
||||||
(name "childhurd")
|
(name "childhurd")
|
||||||
(group "childhurd")
|
(group "childhurd")
|
||||||
|
(supplementary-groups '("kvm"))
|
||||||
(comment "Privilege separation user for the childhurd")
|
(comment "Privilege separation user for the childhurd")
|
||||||
(home-directory "/var/empty")
|
(home-directory "/var/empty")
|
||||||
(shell (file-append shadow "/sbin/nologin"))
|
(shell (file-append shadow "/sbin/nologin"))
|
||||||
|
|
Reference in a new issue