On Monday, March 10, 2014 at 7:05:52 PM UTC-7, David Schissler wrote:
> I'm interested in running Vagrant from within an AppVM.  All of the 
...
> 
> Does anyone do something similar?

https://gist.github.com/xahare/0f2078fc8c52e7ddece1e5ba70c6d5fc

in short, yes, this works fine with the libvirt provider if your willing to 
take a performance hit from using qemu without kvm. vagrant-mutate can convert 
virtualbox based vagrant boxes to libvirt ones.

i've done virtualbox in an hvm using software emulation. it also works, but 
only for 32bit boxes. since most are 64 bit, your better off with libvirt. had 
to use an hvm for virtualbox because the kernel module wont compile otherwise. 
maybe an older version in the package repo could work.

lxc is fast, but i havent done more than a vagrant up on a base box with it. 

while i have this setup, and it works well, i mostly ssh to a box i built just 
for running vagrant. its also libvirt. if you want to co exist with virtualbox, 
i suggest nesting that in vmware. one should concider the vagrant server 
untrusted anyway. an advantage of this approach is you can use virt-manager and 
tmux and have vagrant sessions, graphical or not, that you can detach from, 
share access with others etc.

another approach you could take is running mac/windows/linux and using packer 
and ansible to make and control VMs to do all your work, and also run vagrant 
either in that host, or in a vm if that vm is vmware, or possibly kvm. havent 
tried virtualbox in kvm in a while. of course, if your used to vagrant, you 
probably already have all or many of your project in vagrant environments 
anyway. 

if you take this approach, and your host is not linux (where you have other 
options) you can get basic protection against malicious usb devices by using 
virtualboxes usbfilter and putting a hold on all devices except, specifically 
your mouse and/or keyboard. but, if an adversary knows the id of those, they 
can clone them in their malicious versions.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/4260390a-ecce-4103-99bf-b41a62a10ca3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to