Add VirtualBox host software
Rationale: running a proprietary OS in a virtual machine inside Tails would be useful by folks who cannot afford doing without their preferred Windows-only piece of software but still want to work in a relatively secure environment.
Next steps
- Install VirtualBox packages from our APT repository instead of from
config/chroot_local-includes/usr/share/amnesia/packages/
. - Rewrite history of
feature/virtualbox-host
to not include the host binary packages. - Try just deleting the VirtualBox networking drivers files
(
vboxnetadp
andvboxnetflt
) to disable network support altogether, see if it breaks anything else, (proposed in January 2013 in the "Tails 0.14 rc1 virtualization testing & howto install virtualbox and vmplayer" thread)
Later / maybe
- Research how to disable VirtualBox network modes that bypass the Tails firewall: see discussion on tails-dev (2012Q4, "Tails 0.14 rc1 virtualization testing & howto install virtualbox and vmplayer" and "VirtualBox host software vs. networking" threads).
Resources
-
How To Set Up A TOR Middlebox Routing All VirtualBox Virtual
Machine Traffic Over The TOR
Network
(Using an adaptation of this we could instruct users to set up each
guest with Bridged Adapter on
vnet0
and then it should magically rout all traffic from the VM through Tor. Identity correlation could be dealt with by using a dedicated TransPort with the IsolateDestAddr option set.) - Whonix (back in times where it still was called TorBOX) implemented
something very similar: https://sourceforge.net/p/whonix/wiki/OneVM/
- Tor was running on the host = Tails in this case.
- Some operating system was running inside the Virtual Machine.
- iptables / bridging was used to route all VM traffic through Tor.
- It was probable affected by identity correlation through circuit sharing.
Feature Branch: feature/virtualbox-host
Related issues
- Related to #5748
- Related to #5456 (closed)
- Related to #8183 (closed)
- Related to #12048 (closed)
- Related to #15835 (closed)
- Has duplicate #7454 (closed)
Original created by @tails on 5606 (Redmine)