Re: [Qemu-devel] [PATCH 0/4] net-bridge: rootless bridge support for qemu

[Anthony Liguori]

Avi Kivity wrote:
> > At least with KVM support, this is probably the most common use case 
> > which means
> > that most of our users are running qemu as root.  That's terrible.
> >    
>
> Most of our users run managed systems.

I consider management software as a user.  Today, most management 
software launches qemu as root.  libvirt is just getting around to 
fixing this although they still are running it as a single user instead 
of as the user requesting the vm be launched.

The fundamental problem, is that to use qemu as a non-privileged user, 
you need to go from userA -> root -> userB.  For the lazy, it's easiest 
just to make userA == userB == root.  IMHO, the ideal thing is to always 
be userA.

If we make this easy for management software to do, they're more likely 
to do the right thing.

--
Regards,

Anthony Liguori