How to Install Guest VMs

Copyright 2016 by Assured Information Security, Inc. Created by Jean-Edouard Lejosne <lejosnej@ainfosec.com>. This work is licensed under the Creative Commons Attribution 4.0 International License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/.

Windows

Windows 7 guest

First steps

  • Find a Windows 7 or Windows 7 SP1 CD or ISO file
  • Insert the CD or copy the ISO to /storage/isos
  • Create a new guest, with at least 1024MB of RAM for a 32 bits install, 2048MB for 64 bits (https://support.microsoft.com/en-us/help/10737/windows-7-system-requirements)
  • Install Windows. It's usually a good idea to choose "Ask me later" when asked about Windows Update, to avoid interference when installing standalone updates below.
  • Download the OpenXT tools certificate (for openxt.ainfosec.com builds, use: http://openxt.ainfosec.com/certificates/windows/developer.cer)
  • Open an Administrator command prompt, cd to the directory where developer.cer was downloaded and run the 3 following commands:
  • bcdedit /set testsigning on
  • certutil -addstore -f "Root" developer.cer
  • certutil -addstore -f "TrustedPublisher" developer.cer
  • Reboot the guest
  • Insert the OpenXT Guest Tools ISO, install the tools and reboot

Installing SP1

Non-SP1 installs of Windows 7 should be upgraded to SP1 first.

Out of the box, there's a chance that the SP1 installation will never finish. The following steps should address that:

  • Install KB947821
  • Run the SP1 standalone installer: KB976932

Fixing Windows Update

Again, out of the box, there are Windows Update issues in WIndows 7 SP1. These are not OpenXT-specific, but they seem to have a bigger impact in Xen guests than on bare-metal.

Microsoft released many Windows Update fixes over the years, and after some testing, the following ones seem to do the trick (install them in this order, using the standalone installers, not Windows Update):

  1. KB3102810 (Make Windows Update a lot faster)
  2. KB3020369 (Dependency for 3.)
  3. KB3161608 (Includes KB3161647, which fixes Windows Update hangs) See http://www.infoworld.com/article/3099109/microsoft-windows/microsoft-yanks-buggy-speed-up-patch-kb-3161608-replaces-it-with-kb-3172605-and-3172614.html
  4. KB3161664 (Suggested by http://superuser.com/questions/951960/windows-7-sp1-windows-update-stuck-checking-for-updates. May not be needed, but seems pretty good to have seeing the description!)

More up to date list 10/13/2016:

  1. KB3102810 (https://support.microsoft.com/en-us/kb/3102810)
  2. KB3020369 (https://support.microsoft.com/en-us/kb/3020369)
  3. KB3172605 (https://support.microsoft.com/en-us/kb/3172605)

Updating

Once Windows Update is fixed, you should now be able to select "Windows Updates" in the Control Panel, check for updates and install the appropriate ones.

At this point, you can also configure Windows Update to automatically download / install updates.

Windows 10 guest

To use a Windows 10 guest without installing the tools (NOT recommended), hibernate should be disabled.

In a administrator Command Prompt (Admin), type the commande line :

powercfg.exe /hibernate off

Linux

Network connection

Linux guests may experience issues to connect to the wired network.

A workaround to this issue is to disconnect eth1

Ubuntu 16.10

First steps

  • Download an installer from the ubuntu web site.
  • Create a new guest (use minimal hardware requirements recommended by Ubuntu)
  • Install Ubuntu and reboot at the end of installation

Turn off ACPI during installation

OXT-694 - Getting issue details... STATUS

It could happens that the guest hibernates or goes to sleep during installation.

To avoid that, ACPI should be turned off.

  • Boot guest on the iso file
  • As the CD boots, access to the advanced page and its options by pressing any key when the small logo appears at the bottom of your screen.

  • Type F6 and select acpi=off

Boot-F6-Other.png

  • Proceed with installation
  • Follow the instruction to install.

At the end of the installation, the guest is ready to be used

Debian 8/9 (Jessie/Stretch)

First steps

  • Download an installer from the debian web site.
  • Create a new guest (use minimal hardware requirements recommended by Debian)
  • Install Debian and reboot at the end of installation
  • On reboot, the guest may be stuck on a black screen, you may then blacklist bochs_drm driver
  • Note: For the first boot, bochs_drm can also be disabled on the kernel cmdline by editing the grub entry and adding "modprobe.blacklist=bochs_drm"

Blacklist bochs_drm driver

OXT-806 - Getting issue details... STATUS

On the black screen, open a terminal (CTRL + ALT + F2)

# cd /etc/modprobe.d
# nano bochsdrm-blacklist.conf (or fbdev-blacklist.conf if exists)

add the line

blacklist bochs_drm

save the file blacklist.config

# update-initramfs -u
# reboot

The guest is ready to be used. The recommended next step is to install the OpenXT tools.


Fedora 24 - Fedora 25

First steps

  • Download the netinst installer from the Fedora web site.
  • Create a new guest (use minimal hardware requirements recommended by Fedora)

Blacklist bochs_drm driver on installation

OXT-806 - Getting issue details... STATUS

  • Boot guest on the iso file
  • Press tab on the CD bootloader
  • Type "modprobe.blacklist=bochs_drm" at the end of the command line
  • Press enter
  • Once the installer starts, swith on eth0 and switch off eth1 in "NETWORK & HOST NAME"
  • Follow the instruction to install.

At the end of the installation, the guest is ready to be used

Turn off ACPI during installation

OXT-808 - Getting issue details... STATUS

It could happens that the guest hibernates or goes to sleep during installation.

To avoid that, ACPI should be turned off.

  • Boot guest on the iso file
  • Press tab on the CD bootloader
  • Type " modprobe.blacklist=bochs_drm acpi=off" at the end of the command line
  • Press enter
  • Once the installer starts, swith on eth0 and switch off eth1 in "NETWORK & HOST NAME"
  • Follow the instruction to install.

At the end of the installation, the guest is ready to be used


CentOS 7

First steps

  • Download an installer from the CentOS web site.
  • Create a new guest (use minimal hardware requirements recommended by CentOS)

Blacklist bochs_drm driver on installation

OXT-806 - Getting issue details... STATUS

  • Boot guest on the iso file
  • Press tab on the CD bootloader
  • Type " modprobe.blacklist=bochs_drm" at the end of the command line
  • Press enter
  • Once the installer starts, swith on eth0 and switch off eth1 in "NETWORK & HOST NAME"
  • Follow the instruction to install.

At the end of the installation, the guest is ready to be used

Turn off ACPI during installation

OXT-694 - Getting issue details... STATUS

It could happens that the guest hibernates or goes to sleep during installation.

To avoid that, ACPI should be turned off.

  • Boot guest on the iso file
  • Press tab on the CD bootloader
  • Type " modprobe.blacklist=bochs_drm acpi=off" at the end of the command line
  • Press enter
  • Once the installer starts, swith on eth0 and switch off eth1 in "NETWORK & HOST NAME"
  • Follow the instruction to install.

At the end of the installation, the guest is ready to be used