{% if libvirt_tls | bool %} listen_tls = 1 listen_tcp = 0 tls_port = "{{ nova_libvirt_port }}" key_file = "/etc/pki/libvirt/private/serverkey.pem" cert_file = "/etc/pki/libvirt/servercert.pem" ca_file = "/etc/pki/CA/cacert.pem" auth_tls = "{{ 'sasl' if libvirt_enable_sasl | bool else 'none' }}" {% else %} listen_tcp = 1 listen_tls = 0 auth_tcp = "{{ 'sasl' if libvirt_enable_sasl | bool else 'none' }}" tcp_port = "{{ nova_libvirt_port }}" ca_file = "" {% endif %} {% if nova_libvirt_logging_debug | bool %} log_level = 1 log_outputs = "1:file:/var/log/kolla/libvirt/libvirtd.log" {% else %} log_level = 3 log_outputs = "3:file:/var/log/kolla/libvirt/libvirtd.log" {% endif %} listen_addr = "{{ migration_interface_address }}" {% if enable_neutron_mlnx | bool %} # Enable read-only access to libvirt socket auth_unix_ro = "none" {% endif %}