retspen / webvirtmgr

WebVirtMgr panel for manage virtual machine
http://retspen.github.io
2.04k stars 536 forks source link

libvirt-sock: Permission denied, novnc, security #469

Open aafanasyev opened 9 years ago

aafanasyev commented 9 years ago

Hi everyone,

First of all thank you for the great project. Looks like it is working good. However, I had some issues.

My system is a Ubuntu Server 14.04.01.

libvirt-sock When I followed Nginx based steps: https://github.com/retspen/webvirtmgr/wiki/Install-WebVirtMgr, the web interface displays me:

/var/run/libvirt/libvirt-sock libvir: Remote error : Permission denied

To solve this I did:

usermod -a -G libvirtd www-data

After this I can see all my instances. My instances are in /var/images.

novnc In Ubuntu 14.04, I do not need couple of the steps of supervisor paragraph:

Debian, Ubuntu Run:

$ sudo service novnc stop
$ sudo update-rc.d -f novnc remove
$ sudo rm /etc/init.d/novnc

security

I think it would be better if Nginx will be configured with IP address restriction, like:

location / {
    allow 192.168.1.1/24;
    allow 127.0.0.1;
    deny 192.168.1.2;
    deny all;
}

Source http://nginx.com/resources/admin-guide/restricting-access/

The connection to nginx could be secured with a Self-Signed certificate...

Can I put somewhere a wish list?

falense commented 9 years ago

I really like these suggestions.