Proxmox 2 PVEVMUser permissions

[RRJ]

Hi,

is it a bug, or does a user with PVEVMUser permission should have an access to the network settings and be able to change them?
Seems like wrong to me. otherwise user can screw the whole networking thing up

oh, an update
and it seems user can create other users and view all settings..

 

[dietmar]

Please can you post your (or an example to reproduce the bug) /etc/pve/user.cfg file?

 

[dietmar]

and it seems user can create other users and view all settings..

Just tested, and I cannot reproduce this. A PVEVMUser does not have those rights. So I guess there is something wrong with you setup. Please post the requested file.

 

[RRJ]

yeah, sorry.
tested once more and it seems, user with these rights cant modify those settings, but can see some of them
are there plans to make these settings for users invisible?

 

[dietmar]

are there plans to make these settings for users invisible?

The plan is to create some kind of user panel (special GUI for VM users), with limited functionality.

 

[RRJ]

ok. thanks
could you please give me a hand and tell, how can i allow user to access storage with ISO and Template files, so one could create a virtual machine? cant figure it out.
btw, the upgrade script worked fine, great job. gonna try to use it on other hosts

 

[dietmar]

ok. thanks
could you please give me a hand and tell, how can i allow user to access storage with ISO and Template files, so one could create a virtual machine? cant figure it out.
btw, the upgrade script worked fine, great job. gonna try to use it on other hosts

Try something like that:

# pveum aclmod /vms -user joe@pve -role PVEVMAdmin
# pveum aclmod /storage/<STOREID> -user joe@pve -role PVEDatatstoreUser

 

[RRJ]

got your point. my bad was, that i gave storage worng name
another question - at this moment, can i limit number of virtual machines user can have? (both openvz and kvm and separately)

 

[dietmar]

at this moment, can i limit number of virtual machines user can have? (both openvz and kvm and separately)

no, currently not (maybe you can only allow access to a few selected VM IDs).

 

[RRJ]

anything in plans?
it would be nice, if user could create only known number of VMs.

 

[dietmar]

anything in plans?
it would be nice, if user could create only known number of VMs.

The plan is to use 'pools' to rescrict such things.

 

[RRJ]

Great. All questions answered. thanks.

 

[RRJ]

another quick question about swap in containers.. where is it now? in memory or on hdd of host? or container?

 

[dietmar]

another quick question about swap in containers.. where is it now? in memory or on hdd of host? or container?

see http://wiki.openvz.org/VSwap

 

[RRJ]

oh, thanks for that link, dietmar!
but to be sure i'd ask anyway: so the new swap system is actually memory and depends on hosts memory size? and the idea is to simulate swaping? what would be recommended settings or ratio? 1:1 as usual, or more?

 

[RRJ]

found and answer
[h=2]How is VSwap Calculated?[/h]VSwap is calculated from the amount of burst memory you add to a virtual server. For example, if you specify 512MB Ram and 1024MB Burst the VSwap would be 512MB (1024MB - 512MB = 512MB).