Hi Miroslav,


On 11/11/2016 01:00 PM, Miroslav Rovis <miro.ro...@croatiafidelis.hr> wrote:
Thanks for replying.

However, my attempts got bogged down at:

virt-install playing poorly with grsecurity-hardened
https://forums.grsecurity.net/viewtopic.php?f=3&t=4609

(maybe some of grsecurity users among you Devuan can tell why such poor
play of virt=install with a (heavily) grsecurity-hardened kernel?... The
grsecurity-hardened Devuan is what I plan to try and achieve also with
DEvuan once I finally install it... But read my apologies at the end of
this email...)

Notice there a link to Gentoo Bugzilla to see why I was trying to see if
virt-install could do for me:
=sys-kernel/hardened-sources-4.7.6: Kernel panic when starting KVM
guests
https://bugs.gentoo.org/show_bug.cgi?id=597554

It's likely a use-after-free condition, according to PaX Team:
https://bugs.gentoo.org/show_bug.cgi?id=597554#c16

More of my reply below.

On 161110-11:05+1100, Andrew McGlashan wrote:
>Okay, doing a reply all to make sure that Miroslav gets this okay....
>
>On 10/11/16 00:31, Miroslav Rovis wrote:
> >...
> >I said would [be looking into this tutorial, if...].
> >If this:
> >>Once the install was done, I dumped the xml, edited it, undefined the
> >>guest and then re-created it from the adjusted xml.  The changes
> >>required (to the xml exported file) were to stop it booting the
> >>installer and to boot from the disk image instead.
> >means what you install with virt-install on an LVM volume on your real
> >hard drive can then be booted normally, regularly, leaving the Virtual
> >Machine behind?
>
>What you have is a Guest machine contained in an LVM volume; the Host
>machine boots normally.
>
>If you wanted to boot the guest machine, then you may need to do more
>works for conversion.  My host machine is with dropbear within initrd
>boot and full disk encryption.  It boots fine with or with the LVM
>created instance.  My purpose was to create a KVM host and then create
>guests (like this one) as needed.
>
>Thanks
>AndrewM
Thank you!

While I think the conversion to turn a Devuan guest is very likely much
more complex than a regular install, none of it can I still attempt to
do yet...

This has cost me a lot of time, and I got nowhere.

I did have a much nicer try with Devuan-based Refracta which I was so
glad about:

Devuan image in Qemu
http://www.croatiafidelis.hr/foss/cap/cap-161015-qemu-devuan/#No5

Thanks again, and;-)  sorry I work so slow...!

Just so you know, grsecurity is included by default in the kernel 4.x of ascii :)

Cheers,

  Aitor.



_______________________________________________
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to