USB redirection via libvirt

USB redirection via libvirt

[TakeV]

[-- Attachment #1.1: Type: text/plain, Size: 767 bytes --]

Hello,

I am trying to get USB redirection working with libvirt, but I am 
hitting a snag. Originally it was not able to redirect the USB devices 
due to spice-client-glib-usb-acl-helper not being available in 
/run/setuid-programs. I was able to resolve that by appending the 
spice-gtk version of spice-client-glib-usb-acl-helper into my 
setuid-programs list. However, I am now getting a new error:

Error setting USB device node ACL: 'Error PoliciKit error: 
GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Action 
org.spice-space.lowlevelusbaccess is not registered' (0)

It fails no matter which client I use (virt-manager, virt-viewer, 
gnome-boxes). Is there a way to fix that permission so I can redirect my 
USB devices?


Thanks!


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 665 bytes --]

Re: USB redirection via libvirt

[Saku Laesvuori]

[-- Attachment #1: Type: text/plain, Size: 720 bytes --]

> I am trying to get USB redirection working with libvirt, but I am 
> hitting a snag. [...] I am now getting a new error:
> 
> Error setting USB device node ACL: 'Error PoliciKit error: 
> GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Action 
> org.spice-space.lowlevelusbaccess is not registered' (0)
> 
> It fails no matter which client I use (virt-manager, virt-viewer, 
> gnome-boxes). Is there a way to fix that permission so I can redirect my 
> USB devices?

I had the same problem some time ago. It can be fixed by extending
polkit-service-type with spice-gtk, i.e.

(operating-system
  ...
  (services
    ...
    (simple-service 'spice-polkit polkit-service-type (list spice-gtk))))

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: USB redirection via libvirt

[TakeV]

[-- Attachment #1.1: Type: text/plain, Size: 817 bytes --]

That worked! Thank you so much.

On 11/20/23 15:21, Saku Laesvuori wrote:
>> I am trying to get USB redirection working with libvirt, but I am
>> hitting a snag. [...] I am now getting a new error:
>>
>> Error setting USB device node ACL: 'Error PoliciKit error:
>> GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Action
>> org.spice-space.lowlevelusbaccess is not registered' (0)
>>
>> It fails no matter which client I use (virt-manager, virt-viewer,
>> gnome-boxes). Is there a way to fix that permission so I can redirect my
>> USB devices?
> I had the same problem some time ago. It can be fixed by extending
> polkit-service-type with spice-gtk, i.e.
>
> (operating-system
>    ...
>    (services
>      ...
>      (simple-service 'spice-polkit polkit-service-type (list spice-gtk))))

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 665 bytes --]

Re: USB redirection via libvirt

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 3110 bytes --]

Hello,

sorry to resurrect an old message but I've the same issue reported on
Nov 2023 by TakeV and the provided solution does not work for me

Saku Laesvuori <saku@laesvuori.fi> writes:

[...]

>> Error setting USB device node ACL: 'Error PoliciKit error: 
>> GDBus.Error:org.freedesktop.PolicyKit1.Error.Failed: Action 
>> org.spice-space.lowlevelusbaccess is not registered' (0)

same error here

[...]

> (operating-system
>   ...
>   (services
>     ...
>     (simple-service 'spice-polkit polkit-service-type (list spice-gtk))))

I've also added that simple-service to my os config, this is a snippet:

--8<---------------cut here---------------start------------->8---

[...]

	(services
	 (append %desktop-services
		 (list
		  ;; libvirt and virtlog daemons
		  (service libvirt-service-type
			   (libvirt-configuration
			    (unix-sock-group "libvirt")
			    (tls-port "16555")))

		  (service virtlog-service-type
			   (virtlog-configuration
			    (max-clients 1000)
			    (max-size 5)
			    (max-backups 9)))

		  (service xfce-desktop-service-type)
		  
		  (set-xorg-configuration
		   (xorg-configuration
		    (keyboard-layout keyboard-layout)))
		  
		  ;; extend polkit for spice-gtk
		  (simple-service 'spice-polkit polkit-service-type (list spice-gtk))

[...]

--8<---------------cut here---------------end--------------->8---

but when I try to apply it I get this error:

--8<---------------cut here---------------start------------->8---

g@ken ~$ sudo guix system reconfigure /etc/config.scm 
Backtrace:
          18 (primitive-load "/home/g/.config/guix/current/bin/guix")
In guix/ui.scm:
   2312:7 17 (run-guix . _)
  2275:10 16 (run-guix-command _ . _)
In ice-9/boot-9.scm:
  1752:10 15 (with-exception-handler _ _ #:unwind? _ # _)
In guix/status.scm:
    859:3 14 (_)
    839:4 13 (call-with-status-report _ _)
In guix/scripts/system.scm:
   1311:4 12 (_)
In ice-9/boot-9.scm:
  1752:10 11 (with-exception-handler _ _ #:unwind? _ # _)
In guix/store.scm:
   684:37 10 (thunk)
   1325:8  9 (call-with-build-handler #<procedure 7f6774ac25a0 at g…> …)
  2205:25  8 (run-with-store #<store-connection 256.100 7f676508d0f0> …)
In guix/scripts/system.scm:
    853:2  7 (_ _)
    727:8  6 (_ #<store-connection 256.100 7f676508d0f0>)
In gnu/system.scm:
  1335:19  5 (operating-system-derivation _)
   870:11  4 (operating-system-services #<<operating-system> kernel:…>)
   904:20  3 (services _)
In /etc/config.scm:
   120:48  2 (services #<<operating-system> kernel: #<package linux-…>)
In ice-9/boot-9.scm:
  1685:16  1 (raise-exception _ #:continuable? _)
  1685:16  0 (raise-exception _ #:continuable? _)

ice-9/boot-9.scm:1685:16: In procedure raise-exception:
error: polkit-service-type: unbound variable

--8<---------------cut here---------------end--------------->8---

AFAIU polkit-service-type is defined in (gnu services desktop) and I'm
including that module: what am I doing wrong please?

Thanks! Gio'

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 849 bytes --]

Re: USB redirection via libvirt

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 854 bytes --]

Giovanni Biscuolo <g@xelera.eu> writes:

[...]

> I've also added that simple-service to my os config, this is a snippet:
>
> --8<---------------cut here---------------start------------->8---
>
> [...]
>
> 	(services
> 	 (append %desktop-services
> 		 (list

[...]

> 		  ;; extend polkit for spice-gtk
> 		  (simple-service 'spice-polkit polkit-service-type (list spice-gtk))
>
> [...]
>
> --8<---------------cut here---------------end--------------->8---

[...]

> AFAIU polkit-service-type is defined in (gnu services desktop) and I'm
> including that module: what am I doing wrong please?

No I was wrong, polkit-service-type is in dbus service module: I added
it and I was able to define that simple-service

[...]

Sorry for the noise!

Happy hacking! Gio'

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 849 bytes --]