There's no point sandboxing a VM because the isolation offered by a virtual machine exceeds that provided by Seccomp BPF.

Oh, I had no idea, thanks for telling me about that.

Oh, and no more 'snap' and MFI 'flatpak'! Leave it to IKEA!

Don't run QEMU (kvm) as root, that's not a good idea.

What about firejailing qemu? With --seccomp and --noroot and --noprofile?

zapper wrote:

Head_on_a_Stick wrote:

It's crap because it needs proprietary blobs to work properly, it's slower than QEMU/KVM and the developers have a long history of ignoring security vulnerabilities (which is why it was removed from Debian's stable releases and backports).

@OP: gnome-boxes provides a very easy to use front end for QEMU/KVM.

Seconded, virtualbox has been crap for a long time.  Matter of fact, the only version I ever liked was 4.1 which didn't require that infernal  non-free watcom compiler

But who knows, it might even have been crap then.

As for if its slower, I am not sure. I haven't used it since 4.1 versions. That was during ubuntu 14.04's life span. 

Glad its been removed, surprised though, I thought Debian would have kept it longer. 
If you want to use qemu this is a better option and should be stickied for a long time to come.
:
This is what I do:

qemu-img create -f qcow2 name-of.qcow2 100g

In the directory where you made your image put your iso and:

sudo kvm -m (amount of memory for VM, i.e. 2048) -cdrom (name of image, i.e., gnuinos.iso) -boot d name-of.qcow2

To start the image after install do:

sudo kvm -m (amount of memory for VM, i.e. 2048)  name-of.qcow2

This is a guide I "borrowed" from gnuinos libre topic.

Aka, not my idea.

Edited it to be a qcow2 image though... ;P

Hi zapper,

thanks for the impromptu lesson on qemu - I'm going to have to stop being lazy and get into the habit of learning CLI - I was just getting into Amiga CLI when I took delivery of my first Windows PC a Pentium P120 (Now an archived AMD 400 Evergreen processor sits in it!). Hope you don't mind me pointing out an error in your sig:

"Haughtiness comes before a fall, pride before destruction." ;-)

Lol, I may have misquoted, but yeah, it at least means something close to that.

On an unrelated note...   

This is the person who showed me that method with img instead of qcow2:  https://dev1galaxy.org/profile.php?id=4889

https://dev1galaxy.org/viewtopic.php?id=712

That's the thread, thank him if you want, I just edited it and changed it from img to qcow2. 

another GUI suggestion for qemu/kvm (and more...) : virt-manager

Hi xinomilo,

Thanks for your input, appreciated - I did look at that package while searching for qemu in Synaptic Package Manager. Will have to take some time out to look at all this.

Head_on_a_Stick wrote:

rolfie wrote:

I am using VB for many years now, no issues with it. Some people say its crap because its from Oracle.

It's crap because it needs proprietary blobs to work properly, it's slower than QEMU/KVM and the developers have a long history of ignoring security vulnerabilities (which is why it was removed from Debian's stable releases and backports).

@OP: gnome-boxes provides a very easy to use front end for QEMU/KVM.

Seconded, virtualbox has been crap for a long time.  Matter of fact, the only version I ever liked was 4.1 which didn't require that infernal  non-free watcom compiler

But who knows, it might even have been crap then.

As for if its slower, I am not sure. I haven't used it since 4.1 versions. That was during ubuntu 14.04's life span. 

Glad its been removed, surprised though, I thought Debian would have kept it longer. 
If you want to use qemu this is a better option and should be stickied for a long time to come.
:
This is what I do:

qemu-img create -f qcow2 name-of.qcow2 100g

In the directory where you made your image put your iso and:

sudo kvm -m (amount of memory for VM, i.e. 2048) -cdrom (name of image, i.e., gnuinos.iso) -boot d name-of.qcow2

To start the image after install do:

sudo kvm -m (amount of memory for VM, i.e. 2048)  name-of.qcow2

This is a guide I "borrowed" from gnuinos libre topic.

Aka, not my idea.

Edited it to be a qcow2 image though... ;P

Hi zapper,

thanks for the impromptu lesson on qemu - I'm going to have to stop being lazy and get into the habit of learning CLI - I was just getting into Amiga CLI when I took delivery of my first Windows PC a Pentium P120 (Now an archived AMD 400 Evergreen processor sits in it!). Hope you don't mind me pointing out an error in your sig:

"Haughtiness comes before a fall, pride before destruction." ;-)

rolfie wrote:

I am using VB for many years now, no issues with it. Some people say its crap because its from Oracle.

It's crap because it needs proprietary blobs to work properly, it's slower than QEMU/KVM and the developers have a long history of ignoring security vulnerabilities (which is why it was removed from Debian's stable releases and backports).

@OP: gnome-boxes provides a very easy to use front end for QEMU/KVM.

Many thanks again Head_on_a_Stick for this information. I appreciate it. We all have to take security very seriously in these trying times.

Can you use Gnome Boxes in a KDE environment? I've fallen in love again with KDE (Plasma) - the wallpapers are outstanding.

https://ibb.co/CvwhJBh

rolfie wrote:

I am using VB for many years now, no issues with it. Some people say its crap because its from Oracle.

It's crap because it needs proprietary blobs to work properly, it's slower than QEMU/KVM and the developers have a long history of ignoring security vulnerabilities (which is why it was removed from Debian's stable releases and backports).

@OP: gnome-boxes provides a very easy to use front end for QEMU/KVM.

Seconded, virtualbox has been crap for a long time.  Matter of fact, the only version I ever liked was 4.1 which didn't require that infernal  non-free watcom compiler

But who knows, it might even have been crap then.

As for if its slower, I am not sure. I haven't used it since 4.1 versions. That was during ubuntu 14.04's life span. 

Glad its been removed, surprised though, I thought Debian would have kept it longer. 
If you want to use qemu this is a better option and should be stickied for a long time to come.
:
This is what I do:

qemu-img create -f qcow2 name-of.qcow2 100g

In the directory where you made your image put your iso and:

sudo kvm -m (amount of memory for VM, i.e. 2048) -cdrom (name of image, i.e., gnuinos.iso) -boot d name-of.qcow2

To start the image after install do:

sudo kvm -m (amount of memory for VM, i.e. 2048)  name-of.qcow2

This is a guide I "borrowed" from gnuinos libre topic.

Aka, not my idea.

Edited it to be a qcow2 image though... ;P

I am using VB for many years now, no issues with it. Some people say its crap because its from Oracle.

It's crap because it needs proprietary blobs to work properly, it's slower than QEMU/KVM and the developers have a long history of ignoring security vulnerabilities (which is why it was removed from Debian's stable releases and backports).

@OP: gnome-boxes provides a very easy to use front end for QEMU/KVM.

I am using VB for many years now, no issues with it. Some people say its crap because its from Oracle. Ok.

Tried qemu, and did not have the features I used to have with VB: a good and useful graphical tools to administer, easy pass through of USB drives, shared folders. And it looked liked I could not reliably use it, it crashed on me spontaneously several times. So I dropped my try.

To pass through USB you have to install the extension pack, without it would not work. And you need to be in the vboxusers group. If I remember correctly on Beowulf I had to load some modules. That wasn't required with ASCII. Got an old XP and a Win7 virtual machine working fine for me (and I use VB to try Linux distros and new versions like Chimaera in VB).

If you need support give us a shout.

rolfie

Hi rolfie,

I know all about the extensions pack - it wasn't until a user on the other OS forum I used to partake had a similar issue - (Gnome DE) - USB was not working - needed 'gnome-tools' - I did that (don't know what KDE needs cf. gnome-tools) but in KDE created a USB filter and labelled it I: to ensure no clashes with other device names but it just does not pickup either USB 3.0 port or USB 2.0 port when I put my SanDisk Ultra 64 Gb stick in - shows up in Host obviously. I was hoping I could cut and paste from downloads in guest OS to Host OS without much success which is what I would really like to achieve. Thanks for responding too.

swarfendor437 wrote:

I've tried searching the forum using "Alternatives to Virtual Box" but not coming up with anything. ... Do people find Qemu workable?

It seems so:
https://dev1galaxy.org/viewtopic.php?pid=19495#p19495

swarfendor437 wrote:

I don't want to go down the VMWare

I dont need VMWare since a lot time. In 2005 I had to buy a license because I did not find an alternative. Not needed anymore. YMMV.

Thanks for your reply - I will give it a try (have installed the packages already) and see how it fares - if it gets too icky - I may return to VB like rolfie.