---
title: Charmhub | Deploy Prometheus libvirt exporter using Charmhub - The Open Operator
  Collection
description: Deploy the latest version of Prometheus libvirt exporter on any cloud.
url: https://charmhub.io/prometheus-libvirt-exporter/docs/e-security
---

# Prometheus libvirt exporter

[Llama (LMA) Charmers](https://charmhub.io/publisher/llama-charmers "View all packages from Llama (LMA) Charmers")

* [Llama (LMA) Charmers](https://charmhub.io/publisher/llama-charmers "View all packages from Llama (LMA) Charmers")
* [Monitoring](https://charmhub.io/?filter=monitoring)

Platform:

24.04

22.04

20.04

18.04

16.04

stable a905e10-dirty

```
juju deploy prometheus-libvirt-exporter
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

---

#### Contacts

* [Submit a bug](https://github.com/canonical/charm-prometheus-libvirt-exporter/issues)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

## [Security](https://charmhub.io/prometheus-libvirt-exporter/docs/e-security#p-34238-security)

The charm installs the libvirt exporter via the [snap](https://snapcraft.io/prometheus-libvirt-exporter) from the Snap Store. This snap is strictly confined, so it only has the required permissions to access libvirtd and run a web server. It’s possible for the user to attach a snap file as a resource, which will be installed instead of prometheus-libvirt-exporter from the Snap Store. This local snap resource will be installed in dangerous mode, not verifying file signatures, so it’s recommended to take care to ensure the correct file is attached as a resource.

The charm also accepts a resource (dashboards), which is expected to be a zip file containing grafana dashboards. All top level \*.json files from the zip file are sent to grafana. Care should be taken to ensure these files are well formed too. These are unlikely to cause security issues, but could cause instability with the charm or Grafana if malformed.

The charm does not directly perform any cryptographic functions.

### [Risks](https://charmhub.io/prometheus-libvirt-exporter/docs/e-security#p-34238-risks)

The upstream project ([libvirt-exporter](https://github.com/Tinkoff/libvirt-exporter)) that this charm ships is unmaintained. The upstream project is however packaged in a strictly confined, maintained snap ([prometheus-libvirt-exporter snap](https://snapcraft.io/prometheus-libvirt-exporter)).

### [Information security](https://charmhub.io/prometheus-libvirt-exporter/docs/e-security#p-34238-information-security)

The exporter exposes metadata about VMs that may contain sensitive information, such as VM names and project names.

---