From 08a68a333cfb7ae32486dd215b2431f2b456bf23 Mon Sep 17 00:00:00 2001 From: Marco Vedovati Date: Thu, 30 May 2019 11:17:06 +0200 Subject: [PATCH] QEMU: disable PAM authentication (used for VNC access) Disable PAM authentication for QEMU 4+: it's a feature used together with VNC access that's not used in Kata. See QEMU commit 8953caf for more details on PAM auth. Fixes: #550 Signed-off-by: Marco Vedovati --- scripts/configure-hypervisor.sh | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/scripts/configure-hypervisor.sh b/scripts/configure-hypervisor.sh index d419c0e43b..0870d41a03 100755 --- a/scripts/configure-hypervisor.sh +++ b/scripts/configure-hypervisor.sh @@ -217,6 +217,10 @@ generate_qemu_options() { qemu_options+=(size:--disable-vnc-png) qemu_options+=(size:--disable-vnc-sasl) + # Disable PAM authentication: it's a feature used together with VNC access + # that's not used. See QEMU commit 8953caf for more details + [ "${qemu_version_major}" -ge 4 ] && qemu_options+=(size:--disable-auth-pam) + # Disable unused filesystem support [ "$arch" == x86_64 ] && qemu_options+=(size:--disable-fdt) qemu_options+=(size:--disable-glusterfs)