[HOME] [DOWNLOAD] [DOCS] [BLOG] [SUPPORT] [TIPS] [ISSUES] [Priority Support]

Virtualbox effective isolation


#1

Hi,
I have this question, how much is it safe to use virtualbox with isolation in mind ?
In my situation, I have to trust in Virtualbox for good isolation from my MAC and Serials, am I protected ? Up to where ?

I saw KVM like alternative, but I don’t know how much it’s complicated or if it’s safer .


#2

Good day,

both the MAC adress and your serial number should be kept away from the guest OS, simply by the design of VBox.

KVM is (in my opinion) actually easier to use. The advantages here are not so much security based though, but rather speed and licensing wise.

Have a nice day,

Ego


#3

What’s problem about licensing ? My interest is only for security .
However, I should read the documentation here, i just asked here because the documentation is very long .
Thanks for the answer .


#4

Good day,

well, projects like Whonix heavily relie on licenses like GPL 2.0, which allows a modification of code for anyone, including improving security aspects. VBox doesn’t complie to these standards in some aspects.

If you really want to get the most security though, Qubes can’t be beaten: https://www.whonix.org/wiki/Qubes/Why_use_Qubes_over_other_Virtualizers

Have a nice day,

Ego


#5

I saw QubeOS, but I don’t know if my laptop is sufficient for this OS …
I have an I7 processor and a good HDD USB3, it’s enough ? I red people about 32 GB of Ram, are they crazy ? :smiley:


#6

Good day,

4GB of RAM should suffice. Of course, the old rule applies, the more VMs you run, the more you’ll need, though 4GB usually gets you about 4 VMs in Qubes at least.

Have a nice day,

Ego


#7

Yeah the Ram it doesn’t seem a problem, but the CPU ? However I will try QubeOS, but KVM is another thing ?


#8

I’ve another question, QubeOS is based on Xen and Fedora, is it so different from Debian OS ?


#9

Good day,

the CPU shouldn’t be limiting either.

KVM is a different solution, which may be used on any Linux, like Debian or Fedora.

Yes, Qubes is based on Fedora and XEN as the virtualizer. XEN is rather similar to KVM, though Qubes improves upon it in a multitude of ways, like isolating network cards from the rest of the host, not just the guests.

Have a nice day,

Ego


#10

Mmm, the problem I think is Fedora, new OS, yes it’s based on Linux but … The security it’s an heavy world :smiley: , always new technologies :slight_smile: .


#11

Good day,

Not sure what you mean. The first version of Fedora was released in 2003, so calling it new really is an understatement by a huge margin. Furthermore, security is one of the things Fedora does better than anyone else, because with Redhat, they have a company focused on improving this aspect more than any other.

Have a nice day,

Ego


#12

Nothing special, I mean that I know Debian but not Fedora, I hope the mitigation will be funny :slight_smile: .