Support Spice ticket.

org.jdrupes.vmoperator.runner.qemu/config-sample.yaml

@@ -95,4 +95,6 @@
     # "display":
     #   "spice":
     #     "port": 5900
+    #     "ticket": (default is to disable ticketing)
+    #     "streamingVideo": (default)
     #     "usbRedirects": 2

org.jdrupes.vmoperator.runner.qemu/src/org/jdrupes/vmoperator/runner/qemu/Configuration.java

@@ -273,6 +273,9 @@ class Configuration implements Dto {
         /** The port. */
         public int port = 5900;
 
+        /** The ticket. */
+        public String ticket;
+
         /** The streaming video. */
         public String streamingVideo;
 

org.jdrupes.vmoperator.runner.qemu/src/org/jdrupes/vmoperator/runner/qemu/Runner.java

@@ -310,6 +310,10 @@ public class Runner extends Component {
         model.put("firmwareVars", Optional.ofNullable(config.firmwareVars)
             .map(Object::toString).orElse(null));
         model.put("vm", config.vm);
+        if (Optional.ofNullable(config.vm.display)
+            .map(d -> d.spice).map(s -> s.ticket).isPresent()) {
+            model.put("ticketPath", config.runtimeDir.resolve("ticket.txt"));
+        }
 
         // Combine template and data and parse result
         // (tempting, but no need to use a pipe here)
@@ -342,6 +346,14 @@ public class Runner extends Component {
             // Files to watch for
             Files.deleteIfExists(config.swtpmSocket);
             fire(new WatchFile(config.swtpmSocket));
+
+            // Helper files
+            var ticket = Optional.ofNullable(config.vm.display)
+                .map(d -> d.spice).map(s -> s.ticket);
+            if (ticket.isPresent()) {
+                Files.write(config.runtimeDir.resolve("ticket.txt"),
+                    ticket.get().getBytes());
+            }
         } catch (IOException e) {
             logger.log(Level.SEVERE, e,
                 () -> "Cannot start runner: " + e.getMessage());

org.jdrupes.vmoperator.runner.qemu/templates/Standard-VM-latest.ftl.yaml

@@ -184,7 +184,12 @@
     <#assign spice = vm.display.spice/>
     # SPICE (display, channels ...)
     # https://www.linux-kvm.org/page/SPICE
-    - [ "-spice", "port=${ spice.port?c },disable-ticketing=on\
+    <#if ticketPath??>
+    - [ "-object", "secret,id=spiceTicket,file=${ ticketPath }" ]
+    </#if>
+    - [ "-spice", "port=${ spice.port?c }\
+        <#if spice.ticket??>,password-secret=spiceTicket\
+        <#else>,disable-ticketing=on</#if>\
         <#if spice.streamingVideo??>,streaming-video=${ spice.streamingVideo }</#if>\
         ,seamless-migration=on" ]
     - [ "-chardev", "spicevmc,id=vdagentdev,name=vdagent" ]