[tor-talk] Designing a secure "Tor box" for safe web browsing?

[Maxim Kammerer]

On Thu, Mar 22, 2012 at 12:02, ra <r_a at lavabit.com> wrote:
>> Although not that strongly related, this discussion makes me think of
>> an idea that's been sleeping for a while in Tails' wishlist:
>> https://tails.boum.org/todo/Two-layered_virtualized_system/
> This is to some degree what I am implementing.

I implemented that approach once for the purpose of running unsafe
browser (https://github.com/mkdesu/liberte/commit/0f0646e), executing
an already-running image inside a nested QEMU. It's a nice exercise,
but too demanding on resources, and ultimately pointless (personal
opinion).

> VirtualBox does not support exporting VMs to OVA including a ISO by now.

VMware does (didn't check whether it or VirtualBox supports reading that back):

<File ovf:href="someimage.iso" ovf:id="file1" ovf:size="216457216"/>

<Item>
  <rasd:AddressOnParent>0</rasd:AddressOnParent>
  <rasd:AutomaticAllocation>true</rasd:AutomaticAllocation>
  <rasd:ElementName>cdrom1</rasd:ElementName>
  <rasd:HostResource>ovf:/file/file1</rasd:HostResource>
  <rasd:InstanceID>6</rasd:InstanceID>
  <rasd:Parent>5</rasd:Parent>
  <rasd:ResourceType>15</rasd:ResourceType>
</Item>

-- 
Maxim Kammerer
Liberté Linux (discussion / support: http://dee.su/liberte-contribute)