mirror of
https://github.com/xen-project/xen.git
synced 2026-10-30 03:00:05 +01:00
Jim Fehlig
803aea1dd8
Commit 6ef823fd added '-nodefaults' to the qemu args created by
libxl, which is a good step in restricting qemu's default
configuration. This change takes another step by adding
-no-user-config, which ignores any user-provided config files in
sysconfdir. Together, -nodefaults and -no-user-config allow Xen
to avoid unkown and uncontrolled qemu configuration.
Both options are also added to the qemu invocation in the
xen-qemu-dom0-disk-backend systemd service file.
Signed-off-by: Jim Fehlig <jfehlig@suse.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
22 lines
709 B
Plaintext
22 lines
709 B
Plaintext
[Unit]
|
|
Description=qemu for xen dom0 disk backend
|
|
Requires=proc-xen.mount xenstored.service
|
|
After=proc-xen.mount xenstored.service xenconsoled.service
|
|
Before=xendomains.service libvirtd.service libvirt-guests.service
|
|
RefuseManualStop=true
|
|
ConditionPathExists=/proc/xen/capabilities
|
|
|
|
[Service]
|
|
Type=simple
|
|
PIDFile=@XEN_RUN_DIR@/qemu-dom0.pid
|
|
ExecStartPre=/bin/grep -q control_d /proc/xen/capabilities
|
|
ExecStartPre=/bin/mkdir -p @XEN_RUN_DIR@
|
|
ExecStart=@qemu_xen_systemd@ -xen-domid 0 \
|
|
-xen-attach -name dom0 -nographic -M xenpv -daemonize \
|
|
-monitor /dev/null -serial /dev/null -parallel /dev/null \
|
|
-nodefaults -no-user-config \
|
|
-pidfile @XEN_RUN_DIR@/qemu-dom0.pid
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|