[GH-ISSUE #469] libvirt-sock: Permission denied, novnc, security #348

New issue

Open

opened 2026-02-27 16:38:57 +03:00 by kerem · 1 comment

kerem commented

2026-02-27 16:38:57 +03:00

Owner

Originally created by @aafanasyev on GitHub (Nov 2, 2014).
Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/469

Hi everyone,

First of all thank you for the great project. Looks like it is working good. However, I had some issues.

My system is a Ubuntu Server 14.04.01.

libvirt-sock
When I followed Nginx based steps: https://github.com/retspen/webvirtmgr/wiki/Install-WebVirtMgr, the web interface displays me:

/var/run/libvirt/libvirt-sock libvir: Remote error : Permission denied

To solve this I did:

usermod -a -G libvirtd www-data

After this I can see all my instances. My instances are in /var/images.

novnc
In Ubuntu 14.04, I do not need couple of the steps of supervisor paragraph:

Debian, Ubuntu
Run:

$ sudo service novnc stop
$ sudo update-rc.d -f novnc remove
$ sudo rm /etc/init.d/novnc

security

I think it would be better if Nginx will be configured with IP address restriction, like:

location / {
    allow 192.168.1.1/24;
    allow 127.0.0.1;
    deny 192.168.1.2;
    deny all;
}

Source http://nginx.com/resources/admin-guide/restricting-access/

The connection to nginx could be secured with a Self-Signed certificate...

Can I put somewhere a wish list?

Originally created by @aafanasyev on GitHub (Nov 2, 2014). Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/469 Hi everyone, First of all thank you for the great project. Looks like it is working good. However, I had some issues. My system is a Ubuntu Server 14.04.01. **libvirt-sock** When I followed Nginx based steps: https://github.com/retspen/webvirtmgr/wiki/Install-WebVirtMgr, the web interface displays me: ``` /var/run/libvirt/libvirt-sock libvir: Remote error : Permission denied ``` To solve this I did: ``` usermod -a -G libvirtd www-data ``` After this I can see all my instances. My instances are in /var/images. **novnc** In Ubuntu 14.04, I do not need couple of the steps of supervisor paragraph: Debian, Ubuntu Run: ``` $ sudo service novnc stop $ sudo update-rc.d -f novnc remove $ sudo rm /etc/init.d/novnc ``` **security** I think it would be better if Nginx will be configured with IP address restriction, like: ``` location / { allow 192.168.1.1/24; allow 127.0.0.1; deny 192.168.1.2; deny all; } ``` _Source_ http://nginx.com/resources/admin-guide/restricting-access/ The connection to nginx could be secured with a Self-Signed certificate... Can I put somewhere a wish list?

kerem commented

2026-02-27 16:38:58 +03:00

Author

Owner

@falense commented on GitHub (Nov 30, 2014):

I really like these suggestions.

@falense commented on GitHub (Nov 30, 2014): I really like these suggestions.