7 ms·
VirtualBox 7.0 Released – Full VM Encryption Support, New Direct3D Acceleration
- LeoPanthera 4y ago> Audio recording: Now using Vorbis as the default audio format for WebM containers. Opus is no longer being used. I wonder why.
- Arnavion 4y agoSearching a GitHub mirror reveals https://github.com/mdaniel/virtualbox-org-svn-vbox-trunk/commit/10179927ec38ebcbcc3a606aa5d7caf67b810687 https://github.com/mdaniel/virtualbox-org-svn-vbox-trunk/com... No idea what bugref:10275 is. It's presumably not https://www.virtualbox.org/ticket/10275 https://www.virtualbox.org/ticket/10275
- teilo 4y agoIt cannot possibly be for technical reasons. It's almost certainly something to do with this: https://www.vectis.com/media/vectis-ip-announces-call-for-patents-essential-to-the-opus-codec https://www.vectis.com/media/vectis-ip-announces-call-for-pa... Which is complete bullsh*t. Looks like Fraunhoffer and Dolby intend to go after any commercial product using Opus, and demand fees. They claim this is only for hardware devices … for now. As to software, they only state they do not intend to go after open source software. But since Virtualbox is also commercial software, Oracle is at risk.
- deleted 4y ago[deleted]
- romantomjak 4y ago> a Developer Preview package for systems with an Apple silicon CPU Ooo, can’t wait to try this out!
- _joel 4y agoThat's caught my attention
- tiffanyh 4y agoWhat do people use who run an M1/M2 based Mac but want to run an x86 VM? Because you can't do this with Virtualbox.
- TillE 4y agoIf you really need to, UTM (which uses qemu for x86). But if you just want to run x86 Windows software, it's much better to run that under a Windows 11 ARM64 VM.
- Alex3917 4y agoUTM doesn't have vagrant support yet: https://github.com/hashicorp/vagrant/issues/12518 https://github.com/hashicorp/vagrant/issues/12518 I basically just want to continue using vagrant, ansible, and ubuntu on my M1 -- what's currently the best stack for that? I tried out Parallels, but there don't seem to be any reputable and up-to-date Ubuntu images for it.
- nicoburns 4y agoCan’t you just use the official Ubuntu installer with Parallels? (ARM version of course)
- outcoldman 4y agoVagrant allows you to configure a script that will create several VMs in the configuration you need. I, for example, use it to create a real Kubernetes cluster with 3 masters and several compute workers.
- outcoldman 4y agoNot sure why people downvoted, but I am also missing Vagrant. I need to configure multiple VMs for various testing, and having Vagrant to spin up a lot of VMs, and run everything I need, that is something I would want to see with vagrant and virtualbox again.
- hsbauauvhabzb 4y agoWhat value does vm encryption have? I’d rather encrypt my host and leave my vms unencrypted, given it would be possible to back door virtual box binaries given an unencrypted file system, or keylog keys assuming a remote breach.
- theevilsharpie 4y agoVirtualbox VM encryption can be useful if the host hypervisor is compromised and the unauthorized party uploads data on disk that the host can trivially access (as is frequently the case with ransomware).
- hsbauauvhabzb 4y agoI don’t understand your comment at all. Ransomware can encrypt and encrypted virtual machine. If the host is compromised at a privilege level able to read or modify the VM, the vm is also implicitly compromised.
- justsomehnguy 4y ago> If the host is compromised at a privilege level able to read Multi-user systems exists, compromise may be at user-level. Sure, if you have root/SYSTEM level access then all bets are off, but defense is like an ogre - it has layers.
- hsbauauvhabzb 4y agoIn what scenario can you read/modify virtual box vms on a shared system in which you can’t read enough of a user profile to compromise an active user session to compromise encrypted credentials? Can you name any scenarios where virtualbox is used in a multi user environment where bare metal shell/fs access is possible that are actually real world? If so I would be telling those entities their architecture is wrong and they would probably save on TCO by re-engineering things. Defence in depth is a legitimate argument under some use cases, but your argument seems to be in favour of over engineering redundant or theoretical security controls rather than creating actual defensible environments.
- eslaught 4y agoHas anyone had luck getting decent GUI performance (macOS host, Linux guest)? I don't need 3D, just sane 2D performance. The last time I tried this, it was so bad that I had to drastically decrease the window size to get reasonable performance. As in, it would basically lock up above a certain window size, and no reasonable amount of waiting would get it to respond. (And yes, I fiddled with all of the obvious knobs for CPU/memory/graphics/etc.) I figure in this day and age of AWS and the like, we should have very, very good open source virtualization software, but no amount of fiddling seems to get it to work well for me.
- NavinF 4y agoGPU passthrough or weep. This is why VMs are so rare on consumer devices.
- SrslyJosh 4y agoI don't know how the perf is, but this might be of interest: https://developer.apple.com/documentation/virtualization/running_gui_linux_in_a_virtual_machine_on_a_mac https://developer.apple.com/documentation/virtualization/run... (Note: This is for the next major release of Mac OS.)
- naikrovek 4y agogithub.com/cirruslabs/tart is a command-line tool which makes this whole VM thing very easy on MacOS starting with Ventura.
- smaccona 4y agoIs there an equivalent of this for Intel Macs?
- Cu3PO42 4y agoThe above framework (Virtualization.framework) provided by Apple is not restricted to AArch64, it's supported on Intel Macs. I'm honestly not sure why a CLI tool would make that restriction, or if it even is a true restriction rather than an error in documentation. In any case, vftool is another CLI and works fine on Intel Macs, but has not yet been updated for graphical VMs.
- metadat 4y agoIs there a way to stop vbox from phoning home to Oracle?
- sitzkrieg 4y agoi use pihole rules :/
- hsbauauvhabzb 4y agoCan you share them?
- Aachen 4y agoDNS blocking seems like the first thing they'd bypass to detect infringement. The DRM industry isn't known for its reasonableness.
- dotancohen 4y agoPresumably Oracle owns enough IP addresses to not rely on DNS. Or even to catch those why try to block DNS from resolving for their IP addresses.
- sebastien_b 4y agoDon’t use it. Period. ORACLE is just releasing this to dupe people into thinking they can use this for free (they can’t).
- severino 4y agoThey can't? You mean Oracle can send you an invoice for using the VirtualBox GPL version your Linux distro provides for free? Never heard of that before, could you please share more details?
- benttoothpaste 4y agoPresumably this was for Expansion Pack that some people install for USB compatibility.
- bratao 4y agoOracle was responsible for my first complaint, while I was doing my first internship in the US. Because once I used my private laptop with the VirtualBox Extension Pack while connected to the work network. The incredible legal/licensing team got in touch because they identified this use. Since than I avoid Oracle like plague.
- deleted 4y ago[deleted]
- nohankyou 4y agoThey just went ahead and sent us an invoice. Sales by extortion... so I made sure to replace our JRE in places (where Oracle snuck in) and uninstall anything else Oracle across our fleet.
- sebastien_b 4y agoStill by law firm ORACLE; this software thing is just a side business to extract licence fees out of companies that thought they could use this for free.
- pjmlp 4y agoThe kind of projects I work on, that is a rounding error on overall project budget. VS Ultimate, SQL Server, AEM, Sitecore, SharePoint, Azure, AWS,...
- hsbauauvhabzb 4y agoHow much do the licences cost?
- ta988 4y agoAs much as they can squeeze.
- sebastien_b 4y agoAnd if they find out you've been using it commercially (even just your home machine you have a non-running copy on connecting to your company's VPN network) without an existing licence, they're squeezing your balls in open court.
- hsbauauvhabzb 4y agoI looked it up, $50 per licence with a 100 licence minimum. Shame, Id pay per licence if I could, but instead I’ll probably just block their traffic and breach their licence. I doubt they can legally enforce those terms in Australia.
- dotancohen 4y agoWhy? Alternatives exists.
- FeistySkink 4y agoCan I run this without having a tainted kernel on Linux? So that Secure Boot can stay on.
- flatiron 4y agoWhat’s wrong with qemu/kvm?
- deleted 4y ago[deleted]
- stjohnswarts 4y agoI find libvirtd to be fine other than sound when compared to virtualbox. I never did get sound to not be laggy and jerky in qemu on linux hosts.
- Arnavion 4y agoFor a Linux guest, I just forward the host's pulseaudio socket over ssh. ssh -R /run/user/1000/pulse/native:/run/user/1000/pulse/native -X the-vm the-audio-using-command I use this VM for occasional video watching and for video conferencing and haven't had any audio problems.
- qalmakka 4y agoThis is a good hack, and it works better than a lot of alternatives, albeit Linux-on-Linux VMs have arguably few uses since systemd-nspawn exists (so you can just --bind the Pipewire socket in the VM)
- dotancohen 4y agoI'd say that Docker has replaced more Linux-on-Linux VMs than has systemd-nspawn. That said, I'm seriously interested in what GP is doing that he's forwarding audio. Maybe testing desktop distros? Circumventing DRM? Multiseating an office with thinclients?
- pm2222 4y agoWhat’s the alternative for host on windows?
- sebazzz 4y agoHyper-V?
- cricalix 4y agoVirtualBox is cross-platform; runs on Linux, Mac, Windows. Images are portable. As a sibling notes, the Windows built-in is Hyper-V. Or if you don’t like your money, VMWare.
- Narishma 4y agoThere's a free version of VMWare, though I don't know what features it lacks.
- wila 4y agoThe free player is what earlier on was the normal version of Fusion. So you only lack the professional features like connect to a vSphere host, have the network editor and a few other smaller issues. See the Compare tab at [0] for a complete list. edit: Oh.. and if you meant VMware Workstation Player then see this list [1] [0] https://www.vmware.com/products/fusion.html https://www.vmware.com/products/fusion.html [1] https://store-us.vmware.com/compare_workstation https://store-us.vmware.com/compare_workstation
- blahyawnblah 4y agoDoes it work with WSL2 installed and not have terrible performance yet?
- johnklos 4y agoOooh! Will 2022 be the year when a virtualization platform can finally run The Sims 2? ;)
- SirGiggles 4y agoPeople were already playing GTA 5 at least five years ago using VFIO/PCIe Passthrough. EDIT: Correction, it was four years ago from my few seconds of rechecking myself
- yellowapple 4y agoWell yeah, but that requires a whole second GPU. A virtual GPU guest driver that translates to calls to the host GPU would be a godsend. Hard to tell if that's what's advertised in these release notes, but if so, then at least older games might finally exhibit some decent performance.
- SirGiggles 4y agoYou _can_ use various hooks to dynamically bind and unbind on a single GPU system but that would be another degree of difficulty for newcomers (on top of potential buginess throughout the stack). As to the latter part of your first sentence, I believe that virtio-gl works in the manner you describe. Thought it is Linux only. I have experimented with it on Proxmox and it works well enough.
- pizza234 4y agoVFIO does work, but it's hacky, so it's very inconvenient unless one has plenty of time and patience. For example, AMD GPUs don't support rebar (took a while to figure out), and they used to have (I don't know if it's been definitely solved) a problem with reset, which caused random lockups when exiting the VM. Additionally, power saving/device ownership must be handled. Which means: either one terminates the X session each time before starting/after stopping the VM (so X will handle the power management), or they leave the card owned by the vfio driver (but this makes the card run hot while sitting doing nothing, because the vfio driver doesn't handle the power management), or they swap drivers on the fly hoping that it will work fine (on nvidia, it's not a stable strategy; no idea on AMD). And these are just a few issues. I've experienced others in the past, and it's very frustrating and time consuming. With all these problems, a combination of dual boot (for demanding 3d tasks) and VMWare (for light ones) is much simpler, and stable. I hope to replace VMWare with VirtualBox for the latter use case.
- UberFly 4y agoVirtualBox 7.0 Released (beta testers wanted)
- GekkePrutser 4y agoBetatesting in a legal minefield, now there's a challenge!
- chatterhead 4y agoCan't wait for the Rust version of this.
- chungy 4y ago> Audio recording: Now using Vorbis as the default audio format for WebM containers. Opus is no longer being used. That's... very surprising. Vorbis is usually regarded as obsolete in favor of Opus. Did they hit some obscure compatibility issue or what?
- influx 4y agoAnyone have suggestion on how to run a Linux Window manager on ARM OSX? I’ve tried running the native x11 client and several virtual machines, and they all felt sluggish compared to native. I guess I’ll eventually dual boot, but it would nice to have iMessage as an alt-tab.
- razemio 4y agoSounds strange I know but without doubt what works best for me is freexrdp. It's good enough to feel native if you do not use 3d acceleration or heavy 2d acceleration. Even videoplayback is okay. On OSX then just use any RDP client to your liking to connect to the vm/container.
- jay-aye-see-key 4y agoUTM is really good. It’s basically just a nice GUI around QEMU. But their bundled version of QEMU also includes a patch to get SPICE working, the homebrew and Macports versions don’t have SPICE working so clipboard access and auto display resizing doesn’t work. Or at least I couldn’t get them to work. The Ubuntu ARM image from their “gallery” works perfectly out of the box so is a good starting point.
- getcrunk 4y agoWasn't the encryption limited to non commercial use, unless you pay for the extensions at 100 unit minimum order lol
- samoit 4y agoI thought VirtualBox was free/opensource to use, even for comercial use. I will change to kvm/qemu
- johannes1234321 4y agoVirtualBox itself is GPL3 licensed. However the Addon for fast USB etc. which is an extra download is proprietary. To my understanding Sun tried to open source that as well, but it contained third party code they couldn't open up.
- tssva 4y agoAs of this release the USB stuff is now included in the opensource base.
- johannes1234321 4y agoOh nice, then I don't need that extension anymore. (RDP, disk encryption, netboot seem to be proprietary only, which aren't things I use on that layer in the stack)
- sireat 4y agoIs Windows Host and Guest performance any good now in version 7.0? I used to use VirtualBox heavily about 15 years ago and it seemed to work well back then for Linux hosts and guests. Since then I've used it sporadically, using it for Linux guests on Windows 7/8/10 as well as Windows XP and 7 on higher Windows. A few days ago I tried to install Windows 10 guest (4cores/8GB RAM) on host Windows 10 host(32GB/6cores) This was on VirtualBox 6.3 and the performance was really slow. Installation took an hour - using same NVME Samsung 980Pro for official Microsoft windows.iso and installation. After installation boot is slowish - a few minutes, and guest system feels like using an Atom processor not i7.
- pulse7 4y agoDoes it support WSL2 inside VM? If you want to use it with USB 2.0 commercially: can you buy a single commercial license or do you still need to buy with "minimum order quantity: 100" for US$50.00 each[1]? [1] https://shop.oracle.com/apex/f?p=dstore:product:2659572559436::NO:RP,6:P6_LPI,P6_PPI:114347640102492137513432 https://shop.oracle.com/apex/f?p=dstore:product:265957255943...
- tssva 4y agoIn this release the EHCI and XHCI USB controllers have moved from the addon to the opensource base.
- edumucelli 4y agoVirtualbox 6.0 had PCI passthrough on Linux hosts. I was using it. Then I have updated to 6.1 to discover that they have removed it. I am afraid of going to 7 and see that other things are missing too :-)