5 ms·

Huh? Memory and disk should be independent for each VM? Short answer - yes using VMs should be good enough.

• db48x 9y ago
  If I install a custom bios, it doesn't matter where the VM images are stored, or what format they are stored in. The bios can read them all.
  • switch007 9y ago
    I'm quite confused about the situation and attack vector you're describing. Could you explain? If you had direct (root) access to the hardware, you can replace firmwares/BIOS, which is what we are discussing. However, as I'm suggesting, if that machine was only ever provisioned with a VM, the bad actor is not given access to the hardware directly (hypervisor bugs aside)
    • db48x 9y ago
      You can't count on the hypervisor being bug-free, and hardware moves from machine to machine. If compromised hardware gets into your machine, regardless of the route, the fact that your programs are running in a VM won't save you.