Re: [Libguestfs] "guestmount --rw" fails but "guestmount --ro" succeeds on Ubuntu 14.04

2016-03-02 Thread Vadaseri Vadaseri
Thanks for your response Rich. Please see the output of --trace --verbose below. Regarding your suggestion to convert the vmdk to some other format, I do not want to do it. A security consultant said by modifying certain files in our VM and restarting the VM, one can gain access to encrypted data

Re: [Libguestfs] Libguestfs as filesystem forensic tool

2016-03-02 Thread Richard W.M. Jones
On Wed, Mar 02, 2016 at 11:26:08PM +0200, noxdafox wrote: > > > On 02/03/16 18:24, Richard W.M. Jones wrote: > >On Wed, Mar 02, 2016 at 05:59:32PM +0200, noxdafox wrote: > >>One of the patches I'm talking about would add TSK (The Sleuth Kit) > >>as a dependency within the appliance. > >> >

Re: [Libguestfs] Libguestfs as filesystem forensic tool

2016-03-02 Thread noxdafox
On 02/03/16 18:24, Richard W.M. Jones wrote: On Wed, Mar 02, 2016 at 05:59:32PM +0200, noxdafox wrote: One of the patches I'm talking about would add TSK (The Sleuth Kit) as a dependency within the appliance. This would bring new APIs such as: 'fls' more powerful 'ls' command allowing to

Re: [Libguestfs] Libguestfs as filesystem forensic tool

2016-03-02 Thread Richard W.M. Jones
On Wed, Mar 02, 2016 at 05:59:32PM +0200, noxdafox wrote: > One of the patches I'm talking about would add TSK (The Sleuth Kit) > as a dependency within the appliance. > > This would bring new APIs such as: > 'fls' more powerful 'ls' command allowing to get list of deleted > files or timelines

Re: [Libguestfs] Libguestfs as filesystem forensic tool

2016-03-02 Thread noxdafox
On 02/03/16 17:53, Richard W.M. Jones wrote: On Wed, Mar 02, 2016 at 05:47:40PM +0200, noxdafox wrote: Greetings, I am playing around with the idea of using libguestfs as a forensic tool to investigate VM disk images. Some use cases as example: * Sandbox for malware analysis. * Incident

Re: [Libguestfs] [libguestfs] Libguestfs as filesystem forensic tool

2016-03-02 Thread Richard W.M. Jones
On Wed, Mar 02, 2016 at 05:47:40PM +0200, noxdafox wrote: > Greetings, > > I am playing around with the idea of using libguestfs as a forensic > tool to investigate VM disk images. > > Some use cases as example: > * Sandbox for malware analysis. > * Incident response in cloud environments. >

Re: [Libguestfs] [PATCH] daemon: do not fail list-disk-labels w/o labels set

2016-03-02 Thread Richard W.M. Jones
On Wed, Mar 02, 2016 at 02:45:04PM +0100, Pino Toscano wrote: > If there are no labels set for the disks, the directory with the > symlinks will not even exists, causing list-disk-labels to fail with > ENOENT. In this situation, act as if the directory was there, but > empty. > --- >

Re: [Libguestfs] signature file is missing for libguestfs-1.32.3.tar.gz

2016-03-02 Thread Richard W.M. Jones
On Wed, Mar 02, 2016 at 02:30:42PM +0200, Nikos Skalkotos wrote: > There is no sig file for v1.32.3 in > http://libguestfs.org/download/1.32-stable/ I've signed it now. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization

[Libguestfs] [libguestfs] Libguestfs as filesystem forensic tool

2016-03-02 Thread noxdafox
Greetings, I am playing around with the idea of using libguestfs as a forensic tool to investigate VM disk images. Some use cases as example: * Sandbox for malware analysis. * Incident response in cloud environments. Libguestfs is a precious resource in this case as it allows to abstract

[Libguestfs] [PATCH] daemon: do not fail list-disk-labels w/o labels set

2016-03-02 Thread Pino Toscano
If there are no labels set for the disks, the directory with the symlinks will not even exists, causing list-disk-labels to fail with ENOENT. In this situation, act as if the directory was there, but empty. --- daemon/devsparts.c | 7 +++ generator/actions.ml | 12 2 files

[Libguestfs] signature file is missing for libguestfs-1.32.3.tar.gz

2016-03-02 Thread Nikos Skalkotos
There is no sig file for v1.32.3 in http://libguestfs.org/download/1.32-stable/ Nikos ___ Libguestfs mailing list Libguestfs@redhat.com https://www.redhat.com/mailman/listinfo/libguestfs

Re: [Libguestfs] [PATCH] make-fs: print error message on mkfs failure

2016-03-02 Thread Richard W.M. Jones
On Wed, Mar 02, 2016 at 11:05:19AM +0100, Pino Toscano wrote: > This makes a bit easier to diagnose failures on mkfs, without the need > to restart the filesystem creation with verbose output (which will > produce a lot more output). > --- > make-fs/make-fs.c | 4 ++-- > 1 file changed, 2

[Libguestfs] [PATCH] daemon: ntfs: fix format strings

2016-03-02 Thread Pino Toscano
Use PRIi64 as format string for int64_t, so it builds and works fine also on 32bit. Also switch from asprintf_nowarn to asprintf, since no custom formats (eg %Q, %R) are used. --- daemon/ntfs.c | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/daemon/ntfs.c

[Libguestfs] [PATCH] make-fs: print error message on mkfs failure

2016-03-02 Thread Pino Toscano
This makes a bit easier to diagnose failures on mkfs, without the need to restart the filesystem creation with verbose output (which will produce a lot more output). --- make-fs/make-fs.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/make-fs/make-fs.c b/make-fs/make-fs.c