Improve security and error handling for VM state and guest file operations; clarify permissions requirements in documentation.
This commit is contained in:
@@ -236,9 +236,9 @@ State writes are locked and atomic. Lifecycle operations share an additional
|
||||
operation lock so concurrent `create`, `stop`, `destroy`, and `install`
|
||||
commands cannot overwrite each other's state or binaries.
|
||||
|
||||
The registry stores guest usernames and passwords in plaintext as requested,
|
||||
so `state.json` is mode `0600`. Treat it as a secret, do not include it in bug
|
||||
reports, and replace the default `root` password immediately.
|
||||
The registry stores guest usernames and passwords in plaintext, so `state.json`
|
||||
is mode `0600`. Treat it as a secret, do not include it in bug reports, and
|
||||
replace the default `root` password immediately.
|
||||
|
||||
Credential provisioning applies only to VMs created by this version. Existing
|
||||
VM disks are not modified automatically.
|
||||
|
||||
Reference in New Issue
Block a user