#xcp — Public Fediverse posts

Дело 2005г.: Sony BMG против собственных покупателей или как защита от пиратства превратилась в руткит

Давайте немного поностальгируем. Помните, каких-то 20 лет назад мы еще покупали музыку альбомами и на дисках, в каждом компе стоял пишущий DVD-привод, а фирмам-дистрибьюторам музыки казалось, что самая большая их проблема в будущем - это пиратство. Герой этой статьи, Sony BMG, испытывала к пиратам такую личную неприязнь, что кушать не могла решила встроить защиту от пиратства на свои диски, причем защита была настолько капитальной, что формально являлась чистым руткитом, безальтернативно устанавливаемым всем PC-пользователям. Надо ли говорить, что как только о рутките стало известно, им воспользовались все, кто мог, кроме самой Sony.

https://habr.com/ru/companies/beget/articles/1024756/

#Sony_BMG #руткит #DRM #история_IT #информационная_безопасность #XCP #пиратство #malware #копирайт #корпоративные_скандалы

@isotopp Das Sahnehäubchen war ja, dass Sonys Software zur Verhinderung illegaler Kopien illegal kopierten Programmcode des LAME-Projekts enthielt.
https://martinvogel.de/lexikon/rootkit.html
#xcp

How to get #XCP-NG running on Apple hardware and get past that “Fatal error” at the end of the installation. Finally wrote this up so others can get this working too.

https://metalsamurai.wordpress.com/2025/03/07/installing-xcp-ng-on-apple-hardware/

If any #homelab folks have some spare disk space and bandwidth and want to help #resist, you can #selfhost an instance of ArchiveTeam Warrior as a VM.

The VM appliances are downloadable off of GitHub and then you just launch the VM and let it work.

If you use #xcp as your #xen hypervisor, and #xenorchestra to manage it, you might think you can just give it the GitHub URL and import. Sadly, no. I got an error. But the VM is only 165M, so if you download it to your laptop and then upload it via the XO web interface, it's trivial to launch.

There's still a lot left to do.
I need to implement the #XCP stuff into the STM32 firmware, so it can run the #startergenerator stand-alone.
Stuff like:
- Checking the firmware version on the ECU, so it doesn't poke the wrong memory address
- Reading and parsing the status of the motor
- And actually controlling the motor properly instead of just sending it a hardcoded 1 Nm torque request :D

And then also cleaning it up enough, documenting and testing it thoroughly, so it can be published.

I spent many dozens of hours losing track of time in #Ghidra (I swear, it's worse than #Factorio)

Until I had figured out the #CAN message handling, signal parsing and where and when which #DTC codes get set.
With that knowledge I could figure out, slowly but surely, what the #startergenerator needs to run.
Even #FBS4 was pretty trivial to circumvent (a single 1 written to the right memory location via #XCP)

And after implementing the ~25 CAN messages in my STM32 code I finally got this today:

Hello #sysadmin
I would like to get some shared experience from people running #XCP-ng in this context:
- at least 2 server rooms / DC
- iSCSI storage appliances
- at least 15 physical hosts
- hundreds of VM
- HA

Thanks :)

Bonjour les #sysadmin
Je cherche quelques retours d’expérience sur l’usage de #XCP-ng dans ce contexte :
- au moins 2 salles machines
- baies de stockage en iSCSI
- plus de 15 nœuds
- plusieurs centaines de VM
- HA

Merci :)

There is the CAN #XCP protocol (Universal Measurement and Calibration Protocol) which does pretty much what it sounds like. But it's usually locked down for production.
Fortunately, this was not the case for the BSG :D
I had to hack together my own XCP dump script and it took about 20 minutes to dump the first contiguous memory segment before the BSG reset the session. (CAN is slow ^^")
Now I had exactly 2 MiB worth of some kind of data, maybe/probably the flash contents.

I've been working with VMware for much of the past 20 years, and with Broadcom now...meeeeh. If anything good has come of this situation, I'm forcing myself for the first time to explore XCP-NG, Proxmox, and Xen and KVM in general more seriously. So far I'm really impressed with what XCP-NG has become, and Xen Orchestrator seems to be heading in the right direction.

So, any Fosstodon-ers out there have thoughts and experience on Vates and XCP-NG in general? #vmware #virtualization #xcp-ng

Can I do a shout-out to my favourite #hypervisor #xcp-ng (https://xcp-ng.org/)? Fast install times, faster machines, easy to manage, disaster recovers is a bliss. And it is rock-solid.

I have been using it (an #xenserver initially) for more than a decade.

#opensource #virtualisation #vms #linux #server

Homelab update:

Upgraded the Proxmox cluster from 7 to 8. Process went smoothly for the cluster, the only issue was a Windows VM had issues booting after migrating off a host for some reason. I'll have to do some troubleshooting there.

Set up the first node in a nested XCP-ng cluster within Proxmox. I think I installed XOA but need to make sure since each time I let the installation run the terminal times out and it logs me back out before I can see the result of the installation script. Need to find out where it installs the XOA listener for the web interface. Then I'll have to read up on how to get the rest of the nested XCP-ng cluster nodes up.

Anyone else running a nested hypervisor cluster? XCP-ng in Proxmox or any other nested configuration? Any issues?

#homelab #proxmox #xcpng #xcp #xen

@techaddressed I run it almost exclusively! #lxd has an awesome set of features surrounding them that have changed my on-prem cloud game. I need vm's for vyos and opnsense or anything iso and I can't help to think #proxmox or #xcp-ng #vmware just kill it with the interface.

I know a lot of us IT folk love a good cli.. You just really need to understand the technology you are working with.. If you don't, man cli's really kind of suck.. at least for a little.

Now I gotta homelab the shit out of this. I'm ganna try #lxd on this thing to run my stuff!! Then of course that will flame out! #Xcp-ng will be next, that will be fine, but ultimately I'll find some shit wrong! Cause no one uses the damn thing. Then land back on #proxmox because #proxmox is #homelab pimp and if you don't come back, shit will happen to you! 😂💥🔥

I used to run QubesOS somewhere around 3.0 RC1 back in 2015. I was impressed with how well it worked out of the box for a major OS project such as this. The only thing that didn't work on my machine at that time was automatic suspend/resume within the netvm.

I loved what @rootkovska was proposing with security by isolation, a much needed step in the right direction for secure systems.

Fast forward to today and the supported hardware has expanded significantly and many problems have been solved in the 4.1 release. The community has also expended and I saw @micahflee's HOPE talk in 2018: "Qubes OS: The Operating System That Can Protect You Even If You Get Hacked"
https://www.youtube.com/watch?v=f4U8YbXKwog

If you're looking to join a community to learn more about Qubes OS I have a few resources. Hope to see you around!

1. Qubes Forum: https://forum.qubes-os.org/
2. Reddit: https://www.reddit.com/r/Qubes/
3. Discord: https://www.reddit.com/r/Qubes/comments/zt5roz/qubesos_content_poll_vote_and_let_me_know_what/

#qubes #qubesos #infosec #privacy #opensource #infosecurity #computersecurity #isolation #community #hacking #whonix #xen #xcpng #xcp #virtualization #security

Something to occupy the weekend... testing out a new hypervisor release... for the most demanding environment known to humanity... the home network... 100% uptime needed to keep family happy!

https://xcp-ng.org/blog/2022/11/18/xcp-ng-8-3-alpha/
#Cloud #Xen #xcp #xcpng #XenServer #tech #uptime #network

Hmm I like #XCP-NG so far, but I feel like the management tools around it aren't great.
For example, as far as I can tell, you can't create an LACP-bonded interface from within #Xen Orchestra. Instead, you do it from the CLI of the host.

Thinking to switch from #ovirt to #xcp-ng. I considered Proxmox, but I don't know .... I've never been a fan for some reason :/

i've just been testing out #proxmox, but it keeps dropping the network connection for me after a few minutes 😒

#xcp-ng on the other hand, works perfectly fine. i guess i'll continue my journey with that one.

@thegibson have you tried #xcp-ng ?

https://xcp-ng.org/

I have been looking into migrating all production systems from esxi to xcp-ng (it's a 100% opensource fork from xenserver and citrix xenserver.

#ActuLibre Xen Orchestra - le point annuel -> https://linuxfr.org/news/xen-orchestra-le-point-annuel #Virtualisation #virtualisation #xenorchestra #xenserver #xcp-ng #xen