catborise 69ddbbdc94 feat(console): the console daemons' systemd units run sandboxed ... webvirt-novncd and webvirt-socketiod get read-only system directories, no access to /home and /root, no new privileges, no kernel tunables, modules or cgroups, and only Unix, IPv4 and IPv6 sockets; socketiod also a private /tmp. novncd keeps the shared /tmp, where a VM's VNC Unix socket may be. They keep what they need: a pty and its console worker, TCP and Unix sockets, ssh with its configuration, writes under /srv/webvirtcloud and the service user's ~/.ssh. The units installed by the update steps bring this.		2026-10-26 23:52:29 +03:00
..
daemon	fix(console): a serial session follows its user's access; a superuser takes over	2026-10-26 19:46:41 +03:00
nginx	feat(console): the VNC console uses the panel's own address	2026-10-26 20:14:04 +03:00
runit	fix(console): the console daemons log where the operator looks	2026-10-26 20:54:11 +03:00
systemd	feat(console): the console daemons' systemd units run sandboxed	2026-10-26 23:52:29 +03:00
install-lib.sh	fix(settings): ALLOWED_HOSTS lists the server's names instead of accepting any host	2026-10-07 16:31:51 +03:00
requirements-ldap.txt	build: LDAP login's packages are optional	2026-10-18 22:50:11 +03:00
requirements.txt	feat(instances): a new VM can get a cloud-init seed with its hostname and SSH keys	2026-10-25 19:57:15 +03:00
test-vm.xml	test(instances): isolate the live libvirt suite on shared hosts	2026-10-04 01:08:11 +03:00
test_install_lib.sh	fix(settings): ALLOWED_HOSTS lists the server's names instead of accepting any host	2026-10-07 16:31:51 +03:00