I'm using Debian 9, Stretch, and if I add a user to the libvirt group, that user has full access to libvirt. That's fine and dandy, but what if I want to restrict user access to certain domains?
polkit >= .106; however, Debian (and Ubuntu) only provide polkit (PolicyKit-1) version .105, initially released in 2012!
Regardless, how can you really limit user/domain access in Debian (and Ubuntu)?
Fwiw, I'm now considering running KVM under LXD.