C.J. May lawndoc

Building a VMware-compatible Open Virtual Appliance (OVA) on QEMU-KVM

This is a method for creating an Open Virtual Appliance (OVA) using a QEMU-KVM host that can be imported into a VMware vSphere/ESXi hypervisor.

OVA/OVF is an open standard for distributing virtual systems, the standard is developed by the Distributed Management Task Force (DMTF) (https://www.dmtf.org/standards/ovf).

All ingredients for setting up an automated build pipeline for VMware-compatible virtual appliances are on this page.

1. Preparing a QEMU-KVM build host

The Publisher:

Collective Ink Ltd, Laurel House, Station Approach, Alresford, Hampshire, SO24 9JH, United Kingdom

The Licensee:

Herman Semenov <GermanAizek@yandex.ru> (Foreign Publisher and address)

Street: Terschellingsestraat 64 >

The problem

WSL2 uses a random network from the 172.16.0.0/12 RFC1918 private IP address block. And our VPN uses that address block, too, with a route metric of 1 (= most preferred.)

This breaks networking for WSL2. Meh!

The solution

While messing around with the interface/route metric of the VPN network may work around the problem, it also reduces the priority of the VPN. We do not really want this. Additionally, changing the interface metric does not seem to be permanent, so it requires more work when it breaks again.

For modern Windows 10 & 11 systems that do not support the legacy GPO approach, test the following for your environment.

1. An Updated XML (Classic Notepad)

To target the Classic (Win32) Notepad (C:\Windows\System32\notepad.exe) instead of the Microsoft Store version, you must use the Applications\notepad.exe ProgID.

File Name: SecurityAssociations.xml

<?xml version="1.0" encoding="UTF-8"?>
<DefaultAssociations>

Overview

Internet connection and DNS routing are broken from WSL2 instances, when some VPNs are active.

The root cause seems to be that WSL2 and the VPN use the same IP address block, and the VPN routing clobbers WSL2's network routing.

This problem is tracked in multiple microsoft/WSL issues including, but not limited to:

	#!/usr/bin/env python3
	"""
	MCP Scanner
	Author: Thomas Roccia \| @fr0gger_

	Packages to install:
	- requests
	- httpx
	- mcp
	"""

	#!/bin/sh
	# Cleans apt-cacher-ng cache
	# SPDX-FileCopyrightText: 2022 Stephan Lachnit <stephanlachnit@debian.org>
	# SPDX-License-Identifier: 0BSD
	systemctl stop apt-cacher-ng
	rm -rf /var/lib/apt/*
	rm -rf /var/cache/apt/*
	rm -rf /var/cache/apt-cacher-ng/
	mkdir -p /var/cache/apt-cacher-ng/{headers,import,packages,private,temp}
	chown apt-cacher-ng:apt-cacher-ng -R /var/cache/apt-cacher-ng

	wordlist created from original 41G stash via:

	grep -rohP '(?<=:).*$' \| uniq > breachcompilation.txt

	Then, compressed with:

	7z a breachcompilation.txt.7z breachcompilation.txt

	Size:

	#If this isn't the user using the shell, username@host will be displayed (if enabled)
	$DEFAULT_USER='Adalbert'

	#True to print username@host event if it's the default user
	$PRINT_DEFAULT_USER=$FALSE

	#Glyphs
	$SEGMENT_DELIMETER_GLYPH=[char]0xE0B0 # î‚°
	$PREV_CMD_FAIL_GLYPH=[char]0x2718 # âœ˜
	$BGTASK_GLYPH=[char]0x2699 # âš™

	#!/usr/bin/env python

	import ConfigParser
	import argparse
	import logging
	import os

	def type_loglevel(level):
	try:
	result = getattr(logging, level.upper())