Skip to content

Installation serviceuser

telsh edited this page Feb 28, 2012 · 7 revisions

HOWTO run archipel not as root


  1. Create a user like this:

useradd -c "archipel service user" -G kvm,libvirtd archipel

  1. Give ownership to the created user:

chown -R archipel /vm/*
chgrp archipel /var/log/archipel
chmod g+w /var/log/archipel
install -o archipel -d /var/lock/archipel
chgrp archipel /etc/archipel /etc/archipel/archipel.conf
chmod g+r /etc/archipel/archipel.conf
chown -R archipel /var/lib/archipel/*
chgrp -R libvirtd /etc/libvirt/qemu
chmod -R g+rw /etc/libvirt/qemu

  1. Change the settings in /etc/init.d/archipel

    a) Set the lockfile to be in the new folder (subsys is not used here)

[...]
lockfile=/var/lock/archipel/archipel.lock
[...]

b) In the "start" section add the user and change the logfile location

su -l archipel -c "$ARCHIPEL --config=$ARCHIPEL_CONF_FILE" >>/var/log/archipel/archipel-startup.log 2>&1

Clone this wiki locally