Add option to specify user for running VM process and services

[KasKatto]

Could there be an option to specify the user that the VM processes should be run as (as well as the user that owns the files), instead of running all VMs as the "microvm" user?

When running multiple VMs and passing in multiple different directories into each of them, ideally each directory would be owned by that specific VM, rather than the global microvm user.

Is this a feature that we could hope to see?

[astro]

That would be a great security feature, but I don't see how it would work with imperatively managed VMs started through the microvm@%i.service template unit.

[KasKatto]

Admittedly that hasn't crossed my mind, as i don't use the imperative features.

At first thought if someone is setting up a vm imperatively i would assume its just to get things up and running quickly and therefore would not be too concerned about permissions - but that is just my own opinion.

Would it not be acceptable to set a default for all services of microvm:kvm as it is currently, but just provide options for the user and group which would create an override when defined, or am i misunderstanding what you mean?

[SuperSandro2000]

Can you create a drop in for microvm@one.service that gets combined with the %i one?