Support for multiple OS malware analysis

[manorit2001]

Is your feature request related to a problem? Please describe. Right now, when using draksetup install we can only install one OS for malware analysis and if we install some other OS, the previous installation is overwritten due to generic filenames and paths

Describe the solution you'd like Changing the paths, filenames to not be generic anymore to support multiple OS installations. I can think of this right now which is open to modification based on further discussions

Mentioning just a few to give an idea on what it could become

Commands

• draksetup install iso -> draksetup install os-name iso
• draksetup postinstall -> draksetup postinstall os-name

Files

• install.json -> installs/os-name.json
• /var/lib/drakrun/profiles/* -> /var/lib/drakrun/os-name/profiles/* (similar for volumes)

Network Adapters

• drak0 -> drak{os-name}0 (Definitely need something new)

Also, regarding drakrun services, they will also have to be modified to different names probably

Open to suggestions

/cc @icedevml @chivay @BonusPlay @kscieslinski

[icedevml]

Support for multiple snapshots is a cool thing but I would rather be cautious in the design. This might really complicate the implementation just for this single feature.

The idea is good but I'm afraid at this stage we have lots of other important issues to resolve.

[manorit2001]

Support for multiple snapshots is a cool thing but I would rather be cautious in the design.

@chivay @catsuryuu do you have any design specifications in mind?

[manorit2001]

If you guys would like to avoid complexity, I was thinking of some new way for that. What do you think about allowing analysis for multiple OS but one at a time?

For e.g, to allow switching to a different os, we can add some command like draksetup switch os-name. After running this command, the files such as vm-0.img, snapshot.sav, install.info,vm-0.cfg and the profiles will start pointing to the OS we switched to ( Using symlinks ). This way, we won't need bigger changes in infrastructure. But it will allow changing the OS easily for analysis without need of any reinstallations