WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

RE: [Xen-users] console access to non root xen 3.0

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: RE: [Xen-users] console access to non root xen 3.0
From: Steve Brueckner <steve@xxxxxxxxxxxxxx>
Date: Wed, 5 Apr 2006 10:19:11 -0400
Delivery-date: Wed, 05 Apr 2006 07:19:44 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Andrew Thompson wrote:
> On Wed, Apr 05, 2006 at 09:09:30AM +0200, Szalai Ferenc wrote:
>> Hi,
>> 
>> Is there any regular way to give console access to specified domU to
>> not root user? How xen domain providers can solve this problem with
>> xen 3.x? 
> 
> Unixshell provides console access to their customers via ssh on an
> alternate port(not 22). I know it can be done, I'm just not sure how
> they're doing it.  
> 
> For my personal use, I use xm console as root. A couple of times I've
> tried to figure out xencons, but didn't get any further than: 
> 
> xen ~ # man xencons
> No manual entry for xencons
> xen ~ # xencons --help
> /usr/bin/xencons <host> <port>

If you mean local access (not via the network) then you can use sudo to give
the user permission to execute 'xm console'.  For access to a specific domU
you'd also need to use a separate domU config file for that domain, and give
the user additional sudo access to execute 'xm list.'  Then you can write a
little script the user can execute (but not write!) that will list running
domU's, grep the results for the custom config file name, and awk the output
line for that domain's Id.  Finally, the script would call 'xm console
<id>'.

Kind of roundabout I know, but we work with the tools we have.

 - Steve Brueckner, ATC-NY

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>