Actions

VM Live Mode: Immutable Disk Method on VirtualBox

From Whonix

< VM Live Mode



About this VM Live Mode/Immutable Disk Method on VirtualBox Page
Support Status testing
Difficulty medium
Contributor Algernon [archive]
Support Support
Whonixlive.jpg

Introduction[edit]

For VirtualBox there is also an alternate way to set the disks to read-only. This option is the official way for setting VM's to read-only in VirtualBox. This option will also only work with the grub-live package, which is installed by default. [1]

Procedure[edit]

1. Make the VirtualBox disk immutable / read-only.

This step is important. Otherwise contents might be recoverable from the host drive. [2]

Follow these steps:

  1. Power off the VM
  2. In the VirtualBox main window, navigate to: FileVirtual Media Manager.
  3. Select the disk to write protect and release it.
  4. Click on Modifyset it to Immutable.
  5. In the VirtualBox main window, navigate to the settings of the VM.
  6. Under storage, select the top controller and add the existing hard disk there.

2. Launch live-mode.

A second boot entry called "VM Live Mode-mode" will be visible. Select it and then press Enter to boot the live system and use it as normal.

3. Optional: Steps to revert changes.

Click on expand on the right.

  1. Power off the VM
  2. Navigate to: FileVirtual Media Manager.
  3. Select the disk. It will now have a snapshot (~12.5 MB) attached to it.
  4. Release the snapshot and delete it.
  5. Click on Modify and set the hard disk to normal.
  6. In the VirtualBox main window, navigate to the settings of the VM.
  7. Under storage, select the top controller and add the existing hard disk there.

Footnotes[edit]

  1. This option will not work with the ro-mode-init pacakge.
  2. VirtualBox implements hard disk write protection differently. If an immutable virtual machine is booted, VirtualBox will always create a snapshot where data is written. After shutting down and booting the VM again (a soft reboot is inadequate) the old snapshot will be deleted and a new one created. The consequence is that data will not persist in the VM, even if Live-mode is not selected. However, since the data is written to the hard disk of the host (instead of memory), it is easily recovered. Therefore, it is necessary to select Live-mode to be safe. A snapshot file is still created, but it will not store any altered content from the VM.


Fosshost is sponsors Kicksecure ™ stage server 100px
Fosshost About Advertisements

Search engines: YaCy | Qwant | ecosia | MetaGer | peekier | Whonix ™ Wiki


Follow: 1024px-Telegram 2019 Logo.svg.png Iconfinder Apple Mail 2697658.png Twitter.png Facebook.png Rss.png Reddit.jpg 200px-Mastodon Logotype (Simple).svg.png

Support: Discourse logo.png

Donate: Donate Bank Wire Paypal Bitcoin accepted here Monero accepted here Contribute

Whonix donate bitcoin.png Monero donate Whonix.png United Federation of Planets 1000px.png

Twitter-share-button.png Facebook-share-button.png Telegram-share.png link=mailto:?subject=VM Live Mode/Immutable Disk Method on VirtualBox&body=../VM_Live_Mode/Immutable_Disk_Method_on_VirtualBox link=https://reddit.com/submit?url=../VM_Live_Mode/Immutable_Disk_Method_on_VirtualBox&title=VM Live Mode/Immutable Disk Method on VirtualBox link=https://news.ycombinator.com/submitlink?u=../VM_Live_Mode/Immutable_Disk_Method_on_VirtualBox&t=VM Live Mode/Immutable Disk Method on VirtualBox link=https://mastodon.technology/share?message=VM Live Mode/Immutable Disk Method on VirtualBox%20../VM_Live_Mode/Immutable_Disk_Method_on_VirtualBox&t=VM Live Mode/Immutable Disk Method on VirtualBox

Follow us on Twitter.png Twitter / Facebook.png Facebook.

https link onion link Priority Support | Investors | Professional Support

Whonix | © ENCRYPTED SUPPORT LP | Heckert gnu.big.png Freedom Software / Osi standard logo 0.png Open Source (Why?)

The personal opinions of moderators or contributors to the Whonix ™ project do not represent the project as a whole.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent.