Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

VirtualBox KVM Public Release

cyberus-technology.de

Post reply on HN
Print view View original

191–200 of 205 posts

Re: VirtualBox KVM Public Release

#191

Post by IntelMiner »

westurner wrote: post #189
westurner wrote: post #187

Earlier quoted context omitted.

FWICS from scanning those resources, there are a few shell commands to wrap with a config parser and an output parser for a GUI E.g. virt-manager is built with glade XML and Python: virt-manager/virt-manager//ui/createvm.ui: https://github.com/virt-manager/virt-manager/blob/main/ui/cr... virt-manager/virt-manager//ui/gfxdetails.ui: https://github.com/virt-manager/virt-manager/blob/main/ui/gf... virt-manager/virt-mana…

"Locating the GPU": https://clayfreeman.github.io/gpu-passthrough/#locating-the-... : for d in /sys/kernel/iommu_groups/*/devices/*; do n=${d#*/iommu_groups/*}; n=${n%%/*} printf 'IOMMU Group %s ' "$n" lspci -nns "${d##*/}" done; iommu.sh gist: https://gist.github.com/Roliga/d81418b0a55ca7682227d57af2778... iommu_groups.sh: https://github.com/drewmullen/pci-passthrough-ryzen/blob/mas... : lspci -nns "${d##*/}" "PCI p…

That's still MASSIVELY more complex than "Next -> Next -> Next -> Done"

Re: VirtualBox KVM Public Release

#192

Post by [deleted] »

markfeathers wrote: post #143

Anyone using VitualBox please be careful about the extension pack. Oracle is very litigous. https://www.reddit.com/r/sysadmin/comments/147k6az/oracle_is... https://www.reddit.com/r/sysadmin/comments/d1ttzp/oracle_is_... https://www.theregister.com/2019/10/04/oracle_virtualbox_mer... We banned virtualbox in our organization since vmware workstation (or virt-manager) is way cheaper than dealing with oracle.

[deleted]

Re: VirtualBox KVM Public Release

#193

Post by k8svet »

sph wrote: post #19

Finally! Every time I need to run a virtual machine, I choose libvirt because it's more performant and easy to deal with than Virtualbox (no kernel module, etc.), but the GUI choices are pretty terrible. The "best" libvirt GUI is virt-manager and it's very, very buggy and lacking features (i.e. doesn't play nice with HiDPI screens, no way of configuring IPv6, etc.) Many times I have caved and chosen VirtualBox simply…

virt-manager is the kind of software that frustrates me, has lost me VM (due to beraking SPICE beyond it already having been broken for years). Bug reports go ignored. Yet, when it works, it works great. And KVM is great. But Christ, it's a nightmare sometimes. Features lag behind libvirt, sometimes years. Just not great. The virt-viewer port to Windows never made it past POC+1, IMO, also.

I'm honestly surprised there aren't more alternatives. Especially since SPICE has gstreamer instegration. Gstreamer can natively do webrtc video and data back channel. Someone could hack together a webrtc broweser-based VM viewer and I suspect there's a lot of interest, potentially money making things you could crate.

Re: VirtualBox KVM Public Release

#194

Post by _cenw »

melvyn2 wrote: post #126
_cenw wrote: post #119

Earlier quoted context omitted.

That's a very recent change to virt-manager, so recent it's on nixos-unstable, but not on nixos-23.11. So it might be in Fedora 39 and some rolling-release distros... and nowhere else.

Could you link the change? At least a few days ago virt-manager still seemed to have scaling issues with guest displays, on nixos-unstable. I had viewer scaling on though as a workaround, so maybe I just didn’t notice.

It's not perfect. On older versions, it'd sometimes add a black border the size of your scaling factor. It still reports your window size times your scaling factor as internal resolution with guest additions though.

Re: VirtualBox KVM Public Release

#195

Post by NanoCoaster »

bongodongobob wrote: post #163
NanoCoaster wrote: post #55

Earlier quoted context omitted.

If you don't mind, I have a specific question regarding this setup. I've been looking into getting into pentesting, mostly for fun. I decided on messing around with HackTheBox as a starting point. Seeing as you need to connect to their VPN, it seems like a good idea to me to separate this activity from my personal network. Which networking setup do you use for your pentesting VM? Ideally, I'd want a setup where the V…

That's just a simple rule on your firewall. I don't understand why you think you need to do this though.

I always assumed that the VPN connection is shared by many HTB users, so it seemed like a good idea to be a bit paranoid about the trustworthyness of a VM that is reachable by lots of users that may want to mess around. Maybe I was wrong about that assumption :D

Anyway, apart from this possibly impractical usecase, it just seems like an interesting problem.

I'll just go with a standard bridge + ip/nftables setup then. Thanks for the input.

Re: VirtualBox KVM Public Release

#196

Post by NanoCoaster »

Manouchehri wrote: post #88
NanoCoaster wrote: post #55

Earlier quoted context omitted.

If you don't mind, I have a specific question regarding this setup. I've been looking into getting into pentesting, mostly for fun. I decided on messing around with HackTheBox as a starting point. Seeing as you need to connect to their VPN, it seems like a good idea to me to separate this activity from my personal network. Which networking setup do you use for your pentesting VM? Ideally, I'd want a setup where the V…

You can probably do this for VirtualBox (and any Linux program) by using tun2socks to create a network interface that routes through a proxy (SOCKS5 if you want UDP support), and then moving that network interface to a new namespace. You can run VirtualBox or any other programs in that new namespace, they don't have to be aware of the proxy at all (since they just see a regular gateway). https://github.com/xjasonlyu/…

Fancy. Think I'm gonna go with a traditional bridge for my usecase, but this looks pretty cool. Maybe I have some other uses for it for other applications.

Thank you :)

Re: VirtualBox KVM Public Release

#197

Post by sph »

iam-TJ wrote: post #159
sph wrote: post #19

Finally! Every time I need to run a virtual machine, I choose libvirt because it's more performant and easy to deal with than Virtualbox (no kernel module, etc.), but the GUI choices are pretty terrible. The "best" libvirt GUI is virt-manager and it's very, very buggy and lacking features (i.e. doesn't play nice with HiDPI screens, no way of configuring IPv6, etc.) Many times I have caved and chosen VirtualBox simply…

Regarding IPv6, there is support. In fact I run IPv6 only networks including for the hypervisors. $ virsh net-dumpxml default6 default6 73590ea2-eb15-4e67-b104-319721bdf302 One can also use DHCPv6 if required.

That's what I meant, I had to use virsh to set that up because it's not possible to do in the GUI.

Re: VirtualBox KVM Public Release

#198

Post by cuddlyogre »

I'd love a realistic alternative to virtualbox on Windows for running Debian as a development environment.

I've tried hypervisor but I can't get networking to work, and trying to set up another adapter gives me a bsod on every computer I try it on.

Wsl2 almost works, but I can't really use Intellij to its full capacity. I'm under the impression that GUI application support is coming so maybe that will change. I'd really love for this to work so I can learn docker, but virtualbox performance is non-existent when wsl is turned on.

Qemu feels incomplete or at least overly complicated compared to Virtualbox.

Re: VirtualBox KVM Public Release

#199

Post by 3np »

NanoCoaster wrote: post #55
Faelian2 wrote: post #50

I am really curious about this. As a pentester, I run use Linux on my laptop and I spend a lot of time working inside a Kali VM with VirtualBox. How much performance improvement can we expect with the KVM backend ?

If you don't mind, I have a specific question regarding this setup. I've been looking into getting into pentesting, mostly for fun. I decided on messing around with HackTheBox as a starting point. Seeing as you need to connect to their VPN, it seems like a good idea to me to separate this activity from my personal network. Which networking setup do you use for your pentesting VM? Ideally, I'd want a setup where the V…

You could take a look at Whonix and Qubes - even if you don't use them you can roll your own setup with a similar approach: Have a dedicated "netvm"/"proxyvm" which only acts as a network bridge. "Minimal Whonix" consists of one workstation VM and one gateway VM (forcing everything over tor). Qubes integrates this approach into the UI of the hypervisor.

Then you can be more confident that (barring something escaping the VM), you have control of what a particular VM may or may not access. Also allows you to have a couple of different netvms (maybe one does give some access to your internal network, one connects only over tor, one via some VPN...) that you can switch between without needing to change anything on the actual VM of concern.

Re: VirtualBox KVM Public Release

#200

Post by iam-TJ »

sph wrote: post #197
iam-TJ wrote: post #159

Earlier quoted context omitted.

Regarding IPv6, there is support. In fact I run IPv6 only networks including for the hypervisors. $ virsh net-dumpxml default6 default6 73590ea2-eb15-4e67-b104-319721bdf302 One can also use DHCPv6 if required.

That's what I meant, I had to use virsh to set that up because it's not possible to do in the GUI.

But it is!

virt-manager v4.0.0 (Ubuntu 22.04 amd64)

"QEMU/KVM" > "Details" (via double-click or context menu) > "Virtual Networks" tab > "+" (Add) button > "Create Virtual Network"/"Details" tab > Expand "IPv6 configuration" > check "Enable IPv6" > enter "Network" prefix and/or check "Enable DHCPv6" > enter "Start" and "End" addresses

Post reply on HN