3 ms·
I played with this for an evening and in the end decided that if I needed this level of security (assuming browser as the target) I was better off running a Chr
by anotherhue 3y ago
I played with this for an evening and in the end decided that if I needed this level of security (assuming browser as the target) I was better off running a ChromeOS Flex VM in qemu.
It works very well, boots quickly and is definitely well isolated. (Probably maybe)
- anotherhue 3y agohttps://chromeenterprise.google/os/chromeosflex/#form-section https://chromeenterprise.google/os/chromeosflex/#form-sectio... #!/usr/bin/env bash set -euo pipefail args=( -snapshot -name cros -nodefaults -machine q35,vmport=off,dump-guest-core=off -cpu host -smp 4 -accel kvm -m 4G -display sdl,gl=on,show-cursor=on -device virtio-gpu-gl -nic user,model=virtio-net-pci -drive format=qcow2,file=/data/cros/cros.qcow2 -usb -device usb-tablet -device intel-hda -device hda-output -device intel-iommu -rtc base=utc -monitor stdio ) qemu-kvm "${args[@]}"
- frankjr 3y agoOh, this is a neat technique - no need for those pesky \ at the end of each line. Thanks!