[fedora-virt] Access to individual VMs

[Dennis J.]

On 02/20/2010 04:36 PM, Tom Horsley wrote:
> On Sat, 20 Feb 2010 14:51:42 +0100
> Kenni Lund wrote:
>
>> If the user should be able to restart a crashed guest, you have to
>> design the system outside of the guest, as you've already described.
>
> Yep. At work we have a gazillion virtual machines for testing
> on different linux distros, and I cobbled up a web cgi interface
> folks who need a particular machine can use to reserve it and
> have the cgi script run a virsh create command for them or
> a script to shutdown the machine (which first tries clean shutdown
> and if that doesn't work, does virsh destroy).
>
> Something similar with the addition of some sort of authentication
> layer could let users goto a web site and login to shutdown,
> reboot, etc. their own machine. There must be canned examples
> for web page login laying around on the web.

That is my backup plan which apparently I need to go for.
The way I plan to do this is to create a central web interface and a 
management user on each host called "vmmanage" that can only execute a 
special script using the ssh command directive in the authorized_keys file. 
This script is then allowed to shutdown/destroy VMs using sudo. I still 
have to figure out some of the details but that's the basic idea.

Regards,
   Dennis