olespete
Member
Trust No One
- Joined:
- Jun 2024
- Posts:
- 270
- From:
- Unknown
Trust No One but verify with code. I wrote a small bash thing, checks for vmgenid, checks /sys/hypervisor/type, checks if initrd contains virtio. Want me to paste?
airgapped, encrypted, faraday'd, still worried
olespete
Member
Trust No One
- Joined:
- Jun 2024
- Posts:
- 270
- From:
- Unknown
#!/bin/bash
echo "=== hypervisor hunt ==="
[ -d /sys/hypervisor ] && cat /sys/hypervisor/type 2>/dev/null
[ -e /sys/devices/virtual/misc/vhost-net ] && echo "vhost-net found"
systemd-detect-virt 2>/dev/null
dmesg | grep -i "hypervisor detected" | tail -3
lsmod | grep -E "virtio|kvm|vbox" | head -5
Run as root. Vmgenid is the smoking gun, bare metal has no vmgenid.
airgapped, encrypted, faraday'd, still worried
PetraSuper
Member
network boot believer
- Joined:
- Jun 2024
- Posts:
- 127
- From:
- Bratislava, Slovakia
I netboot my diagnostics. If the provider PXE boots my image, I control what kernel runs. No fake lscpu possible when I compile the kernel. But most "dedicated" providers do not allow custom PXE. Tells you something.
boot anything, anywhere, anytime