Re: How to launch a bhyve vm as normal user,without being root

If I keep the bhyve scripts in /usr/sbin,it works. But I want to keep the
bhyve scripts in /bhyve and I don't want to keep them in /usr/sbin. For
this reason I've added the path /bhyve to /home/marietto/.zshrc like this :

# ~/.zshrc

# zsh autocompletion for sudo and doas
zstyle ":completion:*:(sudo|su|doas):*" command-path /usr/local/bin
/usr/local/sbin /usr/sbin /usr/bin /bin /sbin /bhyve

and in /root/.zshrc :

# zsh autocompletion for sudo and doas
zstyle ":completion:*:(sudo|su|doas):*" command-path /usr/local/bin
/usr/local/sbin /usr/sbin /usr/bin /bin /sbin /bhyve

but when I try to run the vm like this :

[marietto@marietto /bhyve]==> doas 12-Win-11-vm12

it says :

doas: 12-Win-11-vm12: command not found

and when I do :

[marietto@marietto /bhyve]==> doas ./12-Win-11-vm12

it says :

doas: Operation not permitted

Why ?


On Mon, Jun 17, 2024 at 7:53 PM Mark Peek <mp@freebsd.org> wrote:

> Likely need to add this as it is what you are passing to doas as the
> command to execute:
>
> permit nopass :wheel as root cmd /usr/sbin/12-Win-11-vm12
>
> Mark
>
> On Mon, Jun 17, 2024 at 10:40 AM Mario Marietto <marietto2008@gmail.com>
> wrote:
> >
> > [marietto@marietto /bhyve]==> sudo cp 12-Win-11-vm12 /usr/sbin
> >
> > [marietto@marietto /bhyve]==> nano /usr/sbin/12-Win-11-vm12
> >
> > #!/bin/sh
> >
> > bhyve-win -S -c sockets=4,cores=2,threads=1 -m 8G -w -H \
> > -S -c sockets=4,cores=2,threads=1 -m 8G -w -H \
> > -s 0,hostbridge \
> > -s 1,ahci-hd,/mnt/da4p2/bhyve/img/Windows/Windows11.img,bootindex=1 \
> > -s 2,ahci-hd,/dev/$vmdisk5 \
> > -s 8:0,passthru,2/0/0 \
> > -s 8:1,passthru,2/0/1 \
> > -s 8:2,passthru,2/0/2 \
> > -s 8:3,passthru,2/0/3 \
> > -s 13,virtio-net,tap12 \
> > -s 29,fbuf,tcp=0.0.0.0:5912,w=1600,h=950,wait \
> > -s 30,xhci,tablet \
> > -s 31,lpc \
> > -l bootrom,/usr/local/share/uefi-firmware/BHYVE_UEFI_CODE.fd \
> > vm0:12 < /dev/null & sleep 2 && vncviewer 0:12
> >
> > [marietto@marietto /bhyve]==> sudo chmod 0755 /usr/sbin/12-Win-11-vm12
> >
> > [marietto@marietto /bhyve]==> sudo nano /usr/local/etc/doas.conf
> >
> > permit nopass :wheel as root cmd /usr/sbin/bhyve-win
> > permit nopass :wheel as root cmd /usr/sbin/bhyve-lin
> >
> > [marietto@marietto /bhyve]==> doas /usr/sbin/12-Win-11-vm12
> > doas: Operation not permitted
> >
> > BUT :
> >
> > [marietto@marietto /bhyve]==> sudo nano /usr/sbin/hallo
> >
> > #!/bin/sh
> > echo hallo $USER
> >
> > [marietto@marietto /bhyve]==> sudo chmod 0755 /usr/sbin/hallo
> >
> > [marietto@marietto /bhyve]==> sudo nano /usr/local/etc/doas.conf
> >
> > permit nopass :wheel as root cmd hallo
> >
> > [marietto@marietto /bhyve]==> doas hallo
> >
> > BOOM ! it works :
> >
> > hallo root
> >
> > On Mon, Jun 17, 2024 at 6:54 PM Dave Cottlehuber <dch@skunkwerks.at>
> wrote:
> >>
> >> On Mon, 17 Jun 2024, at 14:12, Mario Marietto wrote:
> >> > Nice idea,but it does not work :
> >> >
> >> > nano /home/marietto/.zshrc
> >> >
> >> > # ~/.zshrc
> >>
> >> Hi Mario, I think your zsh stuff is getting in the way
> >> here. Your zshrc function is not visible to the root user,
> >> as doas cleans up all the env and so your function is unknown.
> >>
> >> So start off with something without bhyve, make sure you are in
> >> wheel group, and add a shell script called
> >> /usr/local/bin/hallo:
> >>
> >> ```
> >> #!/bin/sh
> >> echo hallo $USER
> >> ```
> >>
> >> chmod 0755 /usr/local/bin/hallo
> >>
> >> ```
> >> # /usr/local/etc/doas.conf (per doas.conf manpage)
> >> permit nopass :wheel as root cmd /usr/local/bin/hallo
> >> ```
> >>
> >> $ doas /usr/local/bin/hallo
> >> hallo root
> >>
> >> then replace your bhyve commands in the hallo script.
> >>
> >> Off the top of my head there's no reason for bhyve to need
> >> anything different to hallo script.
> >> A+
> >> Dave
> >
> >
> >
> > --
> > Mario.
>


-- 
Mario.