HackerTrans
TopNewTrendsCommentsPastAskShowJobs

gonzodaruler

no profile record

Submissions

KVM Nested Virtualization Bug Hunting

cyberus-technology.de
2 points·by gonzodaruler·2 ปีที่แล้ว·1 comments

Nested Virtualization for the KVM Back End for VirtualBox

cyberus-technology.de
2 points·by gonzodaruler·2 ปีที่แล้ว·2 comments

comments

gonzodaruler
·2 ปีที่แล้ว·discuss
Available now on github: https://github.com/cyberus-technology/virtualbox-kvm
gonzodaruler
·2 ปีที่แล้ว·discuss
*

1 point by gonzodaruler 0 minutes ago | next | edit | delete [–]

> Of course, some day Virtualbox may support a KVM backend, just as virtualization tools are starting to support unified hypervisor backends on Windows and macOS. There's even an existing patch, though I do not know what the status is and whether or not it could ever be merged upstream.[3]

This is the official patch set for the VirtualBox KVM backend. Our plan is to support this for the near future. There are even packages for ArchLinux (AUR), gentoo and NixOS already if you want to test this.
gonzodaruler
·2 ปีที่แล้ว·discuss
Since version 7.0, VirtualBox supports the NEM (Native Execution Manager) mode for other hypervisors. With the NEM, basically all hypervisors can be supported as backend.
gonzodaruler
·2 ปีที่แล้ว·discuss
Sometimes, a picture says more than a thousand words: https://imgur.com/a/flar7CO

This is Intel SR-IOV graphics virtualization in action.
gonzodaruler
·2 ปีที่แล้ว·discuss
This is definitively not expected. You could also try setting the CPU/Mem configuration via VBoxManage. Maybe you get a good error message then.

`VBoxManage modifyvm <vm_name> --cpus <number of cpus>`

`VBoxManage modifyvm <vm_name> --memory <amout of memory in MB>`
gonzodaruler
·2 ปีที่แล้ว·discuss
A lot of this has changed in recent VirtualBox versions. USB3 and Webcam support is now part of the OSE release.
gonzodaruler
·2 ปีที่แล้ว·discuss
Starting with VirtualBox 7, USB3 no longer requires the commercial extension pack but is part of the OSE release. See https://github.com/cyberus-technology/virtualbox-kvm/blob/de...
gonzodaruler
·2 ปีที่แล้ว·discuss
Thanks. You can indeed use the extension pack with KVM Virtualbox, just make sure that you don't violate any license agreements.
gonzodaruler
·2 ปีที่แล้ว·discuss
With this version of VBox, it's quite possble to pass a GPU to the VM. Have a look at https://www.cyberus-technology.de/products/hypervisor if you want to see a demo.
gonzodaruler
·2 ปีที่แล้ว·discuss
The emulated hardware is basically the same as with stock VirtualBox. Only the interrupt contoller (local APIC) is emulated by KVM.
gonzodaruler
·2 ปีที่แล้ว·discuss
You can use `VBoxManage --attach-vfio` if you want to experiment with pci passthrough. This is different from the Oracle `pciattach` call and does not require any support from the extension package.
gonzodaruler
·2 ปีที่แล้ว·discuss
There is experimental support for VFIO PCI pass-through with VirtualBox-KVM, even for GPUs. Please have a look at https://www.cyberus-technology.de/products/hypervisor
gonzodaruler
·2 ปีที่แล้ว·discuss
Yes. Don't expect too much though. 3D acceleration with Virtualbox is rather flaky (independent of using KVM).
gonzodaruler
·2 ปีที่แล้ว·discuss
What you can configure in the GUI is an enlightenment that the guest will see. This is usually done to improve guest performance.

You can sill select these PV interfaces with VirtualBox-KVM, but the underlying hypervisor is different (kvm vs vboxdrv).
gonzodaruler
·2 ปีที่แล้ว·discuss
It does.
gonzodaruler
·2 ปีที่แล้ว·discuss
Running VirtualBox-KVM in a QEMU-VM with enabled nesting should work though.