#virtualization — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #virtualization, aggregated by home.social.
-
Podman 6.1 is out with new volume rename and machine restart commands, Quadlet enhancements, improved networking, and multiple bug fixes.
https://linuxiac.com/podman-6-1-adds-volume-renaming-machine-restart/ -
Podman 6.1 is out with new volume rename and machine restart commands, Quadlet enhancements, improved networking, and multiple bug fixes.
https://linuxiac.com/podman-6-1-adds-volume-renaming-machine-restart/ -
#QEMU 11.1Open-Source Virtualization Software Released with Universal Flash Storage (UFS) Emulation Support https://9to5linux.com/qemu-11-1-released-with-universal-flash-storage-ufs-emulation-support
-
#QEMU 11.1Open-Source Virtualization Software Released with Universal Flash Storage (UFS) Emulation Support https://9to5linux.com/qemu-11-1-released-with-universal-flash-storage-ufs-emulation-support
-
QEMU 11.1 is out with RISC-V big-endian target support, ARM nested virtualization improvements, new PowerPC defaults, and multiple security fixes.
https://linuxiac.com/qemu-11-1-adds-risc-v-big-endian-support-arm-nested-virtualization/ -
QEMU 11.1 is out with RISC-V big-endian target support, ARM nested virtualization improvements, new PowerPC defaults, and multiple security fixes.
https://linuxiac.com/qemu-11-1-adds-risc-v-big-endian-support-arm-nested-virtualization/ -
I also learned that Copy & Paste are wonky in the Parallels / Ubuntu environment. ⌘C and ⌘V work in Firefox to interoperate with the Mac clipboard. In Terminal it's shift-ctrl-C and shift-ctrl-V.
-
I also learned that Copy & Paste are wonky in the Parallels / Ubuntu environment. ⌘C and ⌘V work in Firefox to interoperate with the Mac clipboard. In Terminal it's shift-ctrl-C and shift-ctrl-V.
-
🚀 Deploy a virtual load balancer on Proxmox VE.
Our latest technical guide covers the complete journey — from VM creation and networking to 2-node HA, security, SSL/TLS, testing and monitoring.
Build a flexible and resilient application delivery platform with RELIANOID.
#Proxmox #LoadBalancing #Virtualization #HighAvailability #OpenSource #RELIANOID
-
Triton: DirectX 11 Driver for QEMU
https://blog.getutm.app/2026/introducing-triton-directx-11-driver-for-qemu/
Comments: https://news.ycombinator.com/item?id=49221711
#HackerNews #Triton #QEMU #DirectX11 #Driver #Virtualization #Gaming #Tech
-
Triton: DirectX 11 Driver for QEMU
https://blog.getutm.app/2026/introducing-triton-directx-11-driver-for-qemu/
Comments: https://news.ycombinator.com/item?id=49221711
#HackerNews #Triton #QEMU #DirectX11 #Driver #Virtualization #Gaming #Tech
-
@winboat just announced Helios their vGPU support and it definitely is a game changer.
It addresses quite a lot of workflows but unusable for others. So why is that?
Helios is API-level paravirtualization. What it's doing is effectively shimming the draw calls as they happen on Windows. It installs its own Vulkan driver in the guest, that driver serializes the calls and sends them over a virtio channel to the Linux host, and the host replays them on the real GPU. The finished frames then come back through a display driver (the Looking Glass IDD) over shared memory. So it's pretty nifty but there are some catches with that approach.
One is you will always be behind and chasing things, like what Wine does. You're translating DirectX, OpenGL and OpenCL onto the one API you actually forward, so you have to constantly maintain the translation layers as games and apps start depending on new features. You're never done with it.
The second and bigger one for users is the guest doesn't see a GPU. At best it sees a generic virtual device, not a native NVIDIA or AMD GPU, so software will not try accelerating on it. It won't work with CUDA or advanced workloads, since there is no client-side AMD or NVIDIA driver at all. Software like Cinema 4D, Ansys, Davinci Resolve, Siemens NX or many others checks for a real vendor GPU before turning on acceleration, and when it doesn't find one it just falls back to the basic Windows software renderer or refuses entirely. You can in theory emulate a Nvidia card being plugged in, but it won't accelerate like one if it doesn't see the proper drivers.
There will also be latency, but this only matters for some workloads. Every submission crosses the VM boundary and every frame gets captured and copied instead of properly scanned out. If you're on Photoshop for example it will be fine, but for fast games or anything sensitive to frame timing it's a tax that passthrough doesn't pay.
-
@winboat just announced Helios their vGPU support and it definitely is a game changer.
It addresses quite a lot of workflows but unusable for others. So why is that?
Helios is API-level paravirtualization. What it's doing is effectively shimming the draw calls as they happen on Windows. It installs its own Vulkan driver in the guest, that driver serializes the calls and sends them over a virtio channel to the Linux host, and the host replays them on the real GPU. The finished frames then come back through a display driver (the Looking Glass IDD) over shared memory. So it's pretty nifty but there are some catches with that approach.
One is you will always be behind and chasing things, like what Wine does. You're translating DirectX, OpenGL and OpenCL onto the one API you actually forward, so you have to constantly maintain the translation layers as games and apps start depending on new features. You're never done with it.
The second and bigger one for users is the guest doesn't see a GPU. At best it sees a generic virtual device, not a native NVIDIA or AMD GPU, so software will not try accelerating on it. It won't work with CUDA or advanced workloads, since there is no client-side AMD or NVIDIA driver at all. Software like Cinema 4D, Ansys, Davinci Resolve, Siemens NX or many others checks for a real vendor GPU before turning on acceleration, and when it doesn't find one it just falls back to the basic Windows software renderer or refuses entirely. You can in theory emulate a Nvidia card being plugged in, but it won't accelerate like one if it doesn't see the proper drivers.
There will also be latency, but this only matters for some workloads. Every submission crosses the VM boundary and every frame gets captured and copied instead of properly scanned out. If you're on Photoshop for example it will be fine, but for fast games or anything sensitive to frame timing it's a tax that passthrough doesn't pay.
-
Hypervisor time in my first hypervisor t-shirt at #FOSSY #Virtualization
-
Hypervisor time in my first hypervisor t-shirt at #FOSSY #Virtualization
-
New blog post!
Set up a stack of virtualization tools on a Debian host for creating and managing virtual machines (VMs).
-
New blog post!
Set up a stack of virtualization tools on a Debian host for creating and managing virtual machines (VMs).
-
CVE-2026-64561 Zapscape - another Januscape KVM guest-to-host escape vulnerability. Kernel patches are available, but release info from distributions is still incoming. Will update as more info becomes available!
https://sketchesfromahomelab.com/articles/2026/08/07/CVE-2026-64561_Zapscape/
Thanks @histrio for the initial alert!
#cve #cve_2026_53359 #cve_2026_64561 #januscape #kvm #linux #security #virtualization
-
CVE-2026-64561 Zapscape - another Januscape KVM guest-to-host escape vulnerability. Kernel patches are available, but release info from distributions is still incoming. Will update as more info becomes available!
https://sketchesfromahomelab.com/articles/2026/08/07/CVE-2026-64561_Zapscape/
Thanks @histrio for the initial alert!
#cve #cve_2026_53359 #cve_2026_64561 #januscape #kvm #linux #security #virtualization
-
Running Proxmox on a dedicated server? Our new tutorial shows you how to virtualize pfSense as your firewall — WAN/LAN bridge setup, VM provisioning, interface assignment, and the VirtIO checksum-offload fix that keeps throughput from tanking.
We also cover pulling Proxmox management off the public internet entirely and securing it behind your new firewall.
Full guide: https://www.fitservers.com/tutorials/configure-pfsense-virtual-firewall-proxmox-dedicated-server/
#pfSense #Proxmox #DedicatedServer #NetworkSecurity #SysAdmin #Homelab #Virtualization
-
🖥️ Proxmox VE extinde oficial suportul dincolo de x86, adăugând arhitectura Arm64! Lansarea oficială a ediției Proxmox Virtual Environment (VE) 9.2 pentru Arm64 aduce suita completă de virtualizare pe servere bazate pe arhitectură ARM. Proiectul împărtășește același depozit de cod, funcționalități și ciclu de viață cu versiunea x86-64. ✨ Principalele noutăți și specificații tehnice:🚀 Paritate completă de funcționalități:• Oferă suport nativ pentru KVM, containere LXC, sistemele de fișiere/stocare ZFS și Ceph, clustering HA, backup și interfața web clasică de administrare. 🖥️ Hardware certificat & Suport Enterprise:• Optimizat pentru servere AI & Cloud: Certificare oficială din prima zi pentru platformele de servere NVIDIA Grace Hopper™ și NVIDIA Vera™.• Cerințe hardware strict server: Necesită boot prin UEFI și descrierea componentelor prin ACPI (compatibil cu ARMv9-A și ARMv8-A în regim best-effort). ⚠️ Fără plăci de dezvoltare (SBC):• Dispozitivele bazate exclusiv pe Device Tree (cum ar fi Raspberry Pi, Orange Pi etc.) NU sunt suportate oficial.⚙️ Stack tehnologic la bază:• Construiți pe Debian 13.5 "Trixie", kernel Linux 7.0, QEMU 11.0, LXC 7.0 și ZFS 2.4. 🔄 Diferențe specifice arhitecturii:• Mașinile virtuale pe Arm64 folosesc exclusiv AAVMF (UEFI) (SeaBIOS nu este disponibil).• Migrarea live a VM-urilor se poate face doar între noduri din aceeași arhitectură (x86 la x86, ARM la ARM). Un pas strategic masiv pentru datacenter-e și mediile enterprise care adoptă servere ARM de înaltă densitate și consum redus de energie! 🚀#Proxmox #ProxmoxVE #ARM64 #Virtualization #Linux #OpenSource #KVM #ZFS #Ceph #SysAdmin #TechNews #FOSS
-
🖥️ Proxmox VE extinde oficial suportul dincolo de x86, adăugând arhitectura Arm64! Lansarea oficială a ediției Proxmox Virtual Environment (VE) 9.2 pentru Arm64 aduce suita completă de virtualizare pe servere bazate pe arhitectură ARM. Proiectul împărtășește același depozit de cod, funcționalități și ciclu de viață cu versiunea x86-64. ✨ Principalele noutăți și specificații tehnice:🚀 Paritate completă de funcționalități:• Oferă suport nativ pentru KVM, containere LXC, sistemele de fișiere/stocare ZFS și Ceph, clustering HA, backup și interfața web clasică de administrare. 🖥️ Hardware certificat & Suport Enterprise:• Optimizat pentru servere AI & Cloud: Certificare oficială din prima zi pentru platformele de servere NVIDIA Grace Hopper™ și NVIDIA Vera™.• Cerințe hardware strict server: Necesită boot prin UEFI și descrierea componentelor prin ACPI (compatibil cu ARMv9-A și ARMv8-A în regim best-effort). ⚠️ Fără plăci de dezvoltare (SBC):• Dispozitivele bazate exclusiv pe Device Tree (cum ar fi Raspberry Pi, Orange Pi etc.) NU sunt suportate oficial.⚙️ Stack tehnologic la bază:• Construiți pe Debian 13.5 "Trixie", kernel Linux 7.0, QEMU 11.0, LXC 7.0 și ZFS 2.4. 🔄 Diferențe specifice arhitecturii:• Mașinile virtuale pe Arm64 folosesc exclusiv AAVMF (UEFI) (SeaBIOS nu este disponibil).• Migrarea live a VM-urilor se poate face doar între noduri din aceeași arhitectură (x86 la x86, ARM la ARM). Un pas strategic masiv pentru datacenter-e și mediile enterprise care adoptă servere ARM de înaltă densitate și consum redus de energie! 🚀#Proxmox #ProxmoxVE #ARM64 #Virtualization #Linux #OpenSource #KVM #ZFS #Ceph #SysAdmin #TechNews #FOSS
-
Not sure if I'm late to that party on this one or not. Guest to host escape in Linux KVM.
Zapscape (CVE-2026-64561)
Zapscape is a use-after-free vulnerability in the shadow MMU emulation of KVM/x86, specifically in the recursive zap path that runs when shadow pages are reclaimed. It can trigger the bug with guest-side actions alone to corrupt the host kernel's shadow page, and it can threaten the guest-host isolation of KVM/x86 hosts that accept untrusted guests and expose nested virtualization, particularly multi-tenant x86 public clouds. -
Not sure if I'm late to that party on this one or not. Guest to host escape in Linux KVM.
Zapscape (CVE-2026-64561)
Zapscape is a use-after-free vulnerability in the shadow MMU emulation of KVM/x86, specifically in the recursive zap path that runs when shadow pages are reclaimed. It can trigger the bug with guest-side actions alone to corrupt the host kernel's shadow page, and it can threaten the guest-host isolation of KVM/x86 hosts that accept untrusted guests and expose nested virtualization, particularly multi-tenant x86 public clouds. -
Zapscape - Guest to host escape in KVM/x86 https://lobste.rs/s/2hatf3 #linux #security #virtualization
https://github.com/V4bel/Zapscape -
Zapscape - Guest to host escape in KVM/x86 https://lobste.rs/s/2hatf3 #linux #security #virtualization
https://github.com/V4bel/Zapscape -
Proxmox VE gains its first official Arm64 edition, bringing KVM, LXC, ZFS, Ceph, clustering, and enterprise support to Arm servers.
https://linuxiac.com/proxmox-ve-officially-expands-beyond-x86-with-arm64-support/ -
Proxmox VE gains its first official Arm64 edition, bringing KVM, LXC, ZFS, Ceph, clustering, and enterprise support to Arm servers.
https://linuxiac.com/proxmox-ve-officially-expands-beyond-x86-with-arm64-support/ -
Proxmox ports itself to Arm with help from Nvidia and Supermicro https://www.theregister.com/virtualization/2026/08/06/proxmox-ports-itself-to-arm-with-help-from-nvidia-and-supermicro/5283770 #theRegister #Virtualization
-
Proxmox officially supports Arm, with some caveats https://lobste.rs/s/wblbfk #devops #virtualization
https://www.jeffgeerling.com/blog/2026/proxmox-ve-arm-official/ -
Proxmox officially supports Arm, with some caveats https://lobste.rs/s/wblbfk #devops #virtualization
https://www.jeffgeerling.com/blog/2026/proxmox-ve-arm-official/ -
CVE-2026-53359 Januscape - analysis, mitigations, links to fixes:
https://sketchesfromahomelab.com/articles/2026/08/04/CVE-2026-53359_Januscape/#cve #cve_2026_53359 #kvm #linux #security #virtualization #januscape
-
CVE-2026-53359 Januscape - analysis, mitigations, links to fixes:
https://sketchesfromahomelab.com/articles/2026/08/04/CVE-2026-53359_Januscape/#cve #cve_2026_53359 #kvm #linux #security #virtualization #januscape
-
Call for testing: OpenBSD vmm(4)/vmd(8) fd-ification https://www.undeadly.org/cgi?action=article;sid=20260804054218 #openbsd #vmm #vmd #virtualization #virtualmachines #testing #newcode #development #security #freesoftware #libresoftware
-
Call for testing: OpenBSD vmm(4)/vmd(8) fd-ification https://www.undeadly.org/cgi?action=article;sid=20260804054218 #openbsd #vmm #vmd #virtualization #virtualmachines #testing #newcode #development #security #freesoftware #libresoftware
-
Windows XP 2002 for the Itanium: Unbridled rage https://lobste.rs/s/9biikj #retrocomputing #virtualization
https://virtuallyfun.com/2026/08/03/windows-xp-2002-for-the-itanium-unbridled-rage/ -
Windows XP 2002 for the Itanium: Unbridled rage https://lobste.rs/s/9biikj #retrocomputing #virtualization
https://virtuallyfun.com/2026/08/03/windows-xp-2002-for-the-itanium-unbridled-rage/ -
The Future of GNOME Boxes https://lobste.rs/s/3umxr8 #virtualization
https://blogs.gnome.org/feborges/future-of-boxes/ -
The Future of GNOME Boxes https://lobste.rs/s/3umxr8 #virtualization
https://blogs.gnome.org/feborges/future-of-boxes/ -
🚀 Incus 7.3 a fost lansat: Accelerare GPU partajată și 13 remedieri de securitate! Ghidul și administratorul open-source de containere și mașini virtuale, Incus, ajunge la versiunea 7.3, aducând funcționalități avansate de performanță, opțiuni noi de rețea și o serie importantă de corecții de securitate. ✨ Ce aduce nou Incus 7.3:🎮 Accelerare GPU 3D partajată pentru VM-uri:• Introduce un tip nativ de GPU ce combină virtio-gpu și virglrenderer, permițând mai multor mașini virtuale Linux să partajeze eficient resursele aceleiași plăci grafice, fără a mai fi nevoie de passthrough PCI dedicat. 🛡️ 13 vulnerabilități de securitate rezolvate:• Remediază probleme critice ce puteau permite traversarea directoarelor (path traversal) sau executarea de comenzi prin legături simbolice și fișiere de backup malițioase.⚙️ Administrare directă UEFI NVRAM:• Comandă nouă incus low-level nvram ce le permite administratorilor să modifice ordinea de boot și variabilele de firmware direct din terminal. 🌐 Îmbunătățiri de rețea și BGP:• Suport pentru sesiuni BGP ne-numerotate prin interfețe de rețea (IPv6 link-local), optimizând rutarea adreselor IP către instanțe. 💻 Instalatoare native pentru Windows & macOS:• Pachete de instalare dedicate (MSI și PKG) lansate direct pentru utilizatorii de desktop. Un pas important pentru un management eficient și sigur al mașinilor virtuale și containerelor pe Linux! 🚀 #Incus #Virtualization #Linux #SysAdmin #OpenSource #Containers #VirtualMachines #CloudNative #TechNews
-
🚀 Incus 7.3 a fost lansat: Accelerare GPU partajată și 13 remedieri de securitate! Ghidul și administratorul open-source de containere și mașini virtuale, Incus, ajunge la versiunea 7.3, aducând funcționalități avansate de performanță, opțiuni noi de rețea și o serie importantă de corecții de securitate. ✨ Ce aduce nou Incus 7.3:🎮 Accelerare GPU 3D partajată pentru VM-uri:• Introduce un tip nativ de GPU ce combină virtio-gpu și virglrenderer, permițând mai multor mașini virtuale Linux să partajeze eficient resursele aceleiași plăci grafice, fără a mai fi nevoie de passthrough PCI dedicat. 🛡️ 13 vulnerabilități de securitate rezolvate:• Remediază probleme critice ce puteau permite traversarea directoarelor (path traversal) sau executarea de comenzi prin legături simbolice și fișiere de backup malițioase.⚙️ Administrare directă UEFI NVRAM:• Comandă nouă incus low-level nvram ce le permite administratorilor să modifice ordinea de boot și variabilele de firmware direct din terminal. 🌐 Îmbunătățiri de rețea și BGP:• Suport pentru sesiuni BGP ne-numerotate prin interfețe de rețea (IPv6 link-local), optimizând rutarea adreselor IP către instanțe. 💻 Instalatoare native pentru Windows & macOS:• Pachete de instalare dedicate (MSI și PKG) lansate direct pentru utilizatorii de desktop. Un pas important pentru un management eficient și sigur al mașinilor virtuale și containerelor pe Linux! 🚀 #Incus #Virtualization #Linux #SysAdmin #OpenSource #Containers #VirtualMachines #CloudNative #TechNews
-
Incus 7.3 introduces shared 3D GPU acceleration for Linux virtual machines, easier port forwarding, UEFI NVRAM management, and fixes for 13 security vulnerabilities.
https://linuxiac.com/incus-7-3-released-with-shared-gpu-acceleration-and-13-security-fixes/ -
Incus 7.3 introduces shared 3D GPU acceleration for Linux virtual machines, easier port forwarding, UEFI NVRAM management, and fixes for 13 security vulnerabilities.
https://linuxiac.com/incus-7-3-released-with-shared-gpu-acceleration-and-13-security-fixes/ -
More AI news from AMD, re-use of the better parts of their Strix Halo yield for industrial use cases.
"Physical AI" aka robotics and edge use cases. Buzzword galore! 😆
Still remember when "edge" was the new buzzword Pepperidge Farm RemembersSomething I do find interesting is the claim of hard real-time assurances whilst virtualized with Xen.
Technically a guaranteed deadline of 2 years is hard real-time too, just as MS-DOS is an amazing real-time OS, but I'm sure that's not what they're talking about...
Any one got more info on the Xen claim? Haven't heard so much about them these days...
#amd #strixhalo #ai #EmbedddedSystems #PhysicalAI #edgecomputing #robotics #xen #virtualization #realtime #rtos #msdos
-
More AI news from AMD, re-use of the better parts of their Strix Halo yield for industrial use cases.
"Physical AI" aka robotics and edge use cases. Buzzword galore! 😆
Still remember when "edge" was the new buzzword Pepperidge Farm Remembers
Something I do find interesting is the claim of hard real-time assurances whilst virtualized with Xen.
Technically a guaranteed deadline of 2 years is hard real-time too, just as MS-DOS is an amazing real-time OS, but I'm sure that's not what they're talking about...
Any one got more info on the Xen claim? Haven't heard so much about them these days...
#amd #strixhalo #ai #EmbedddedSystems #PhysicalAI #edgecomputing #robotics #xen #virtualization #realtime
-
The Xen 4.22 hypervisor arrives with x86 FRED support, AMD Bus Lock Threshold, ARM guest suspend and resume, and Xenstore scalability improvements.
https://linuxiac.com/xen-4-22-hypervisor-brings-new-x86-features-and-better-arm-power-management/ -
5 Things to Consider BEFORE Your VMware ELA Expiration Date https://www.theregister.com/virtualization/2026/07/30/partner-content-5-things-to-consider-before-your-vmware-ela-expiration-date/5279097 #theRegister #Virtualization
