如何确保在我的 terraform 实现中适合 .qcow2 文件的用户权限-解网

问：

我安装了基于 debian 的 kvm/qemu，并想通过 terraform 部署虚拟机。

provider "libvirt" {
  uri = "qemu:///system" # Verbindung zur lokalen QEMU-Instanz
}

resource "libvirt_volume" "debian_image" {
  name = "debian.qcow2"
  pool = "default" # Name des Speicherpools
  #source      = "https://cdimage.debian.org/cdimage/openstack/current/debian-10-openstack-amd64.qcow2"
  source = "https://cloud.debian.org/images/cloud/bullseye/20230912-1501/debian-11-nocloud-ppc64el-20230912-1501.qcow2"
  format = "qcow2"
  #content_type = "raw"
}

resource "libvirt_domain" "debian_vm" {
  name   = "debian-vm"
  memory = "2048"
  vcpu   = 2

  disk {
    volume_id = libvirt_volume.debian_image.id
  }

  network_interface {
    network_name = "testbed_network" # Name des virtuellen Netzwerks
  }
}

resource "libvirt_network" "testbed_network" {
  # the name used by libvirt
  name = "testbed_network"

  # mode can be: "nat" (default), "none", "route", "open", "bridge"
  mode = "nat"

  #  the domain used by the DNS server in this network
  domain = "debian_vm"

  #  list of subnets the addresses allowed for domains connected
  # also derived to define the host addresses
  # also derived to define the addresses served by the DHCP server
  addresses = ["192.168.0.0/24"]

  # (optional) the bridge device defines the name of a bridge device
  # which will be used to construct the virtual network.
  # (only necessary in "bridge" mode)
  # bridge = "br7"

  # (optional) the MTU for the network. If not supplied, the underlying device's
  # default is used (usually 1500)
  # mtu = 9000
}

但不幸的是，我运行了错误：

Error: error creating libvirt domain: internal error: qemu unexpectedly closed the monitor: 2023-09-25T08:04:58.118075Z qemu-system-x86_64: -blockdev {"driver":"file","filename":"/var/lib/libvirt/images/debian.qcow2","node-name":"libvirt-1-storage","auto-read-only":true,"discard":"unmap"}: Could not open '/var/lib/libvirt/images/debian.qcow2': Permission denied
│ 
│   with libvirt_domain.debian_vm,
│   on maint.tf line 14, in resource "libvirt_domain" "debian_vm":
│   14: resource "libvirt_domain" "debian_vm" {

我不明白通过此进程下载的文件如何为同一进程配置不合适的用户权限？需要启用哪个用户以及在哪里（用户组、配置文件等）

我尝试在系统上使用合适的 providers.tf 来运行此 main.tf。请帮我解决这个问题。

terraform Debian qemu kvm

如何确保在我的 terraform 实现中适合 .qcow2 文件的用户权限

How can I ensure fitting user right for .qcow2 file in my terraform implementation

评论