search

ashemery / CuckooVM

Cuckoo running in a nested hypervisor
128 stars 21 forks source link

Import of cuckoovm version 2 into ESXi 6.7U3 (AMD) error #6

Open icurnet opened 4 years ago

icurnet commented 4 years ago

I (am) was unable to import the cuckoovm version 2 into my ESXi 6.7U3 server without the following error:

'Line 25: Unsupported hardware family 'vmx-16'.'

I have sha256 hashed the files on my host below, d/l via tor on 22 Apr 2020 1341h EST:

dav1d@tsurugi:~/Downloads/CuckooVM$ ls -alhr total 31G -rw-r--r-- 1 dav1d dav1d 9.0G Apr 22 13:41 Win7_Intel.tar -rw-r--r-- 1 dav1d dav1d 2.2K Apr 22 09:11 README.txt drwxr-xr-x 2 dav1d dav1d 4.0K Apr 22 09:12 .____padding_file -rw-r--r-- 1 dav1d dav1d 1016 Apr 22 09:11 CuckooVM_meta.xml -rw-r--r-- 1 dav1d dav1d 16K Apr 22 09:11 CuckooVM_meta.sqlite -rw-r--r-- 1 dav1d dav1d 7.6K Apr 22 09:11 CuckooSRV.ovf -rw-r--r-- 1 dav1d dav1d 183 Apr 22 09:11 CuckooSRV.mf -rw-r--r-- 1 dav1d dav1d 23G Apr 22 13:41 CuckooSRV-disk1.vmdk drwxr-xr-x 5 dav1d dav1d 4.0K Apr 24 16:25 .. drwxr-xr-x 3 dav1d dav1d 4.0K Apr 22 13:41 . dav1d@tsurugi:~/Downloads/CuckooVM$ sha256sum . 34e713c9599b081811672ec5b851d775ed73b9ffa1c72581382e9168ccf88a7b CuckooSRV-disk1.vmdk 549faec62860c6d0b4c7a79ea52eb6db903c736bcd4b9fdf746e9326f19d72f9 CuckooSRV.mf a5648a5e8e4db6ca4c136fc26662dcbc930e18898cd89512aadd43d99394f6a0 CuckooSRV.ovf bf6185295b5f1d8fa1461ceabe9d861d5893a7e3c34d87390aa7640230a2aa89 CuckooVM_meta.sqlite 18a08edb345430066ce5e77cb8192ce860e3e2e7ed771c5c400eb3dd040b161d CuckooVM_meta.xml ba9e418a1f5deef04f964ef6ade11dbf27562ca941f46c53e2848fa9b0be6fe4 README.txt fcbfb37f40d999096871a37f090e95173cd19bcdce70cdcbcc50a173680cade4 Win7_Intel.tar dav1d@tsurugi:~/Downloads/CuckooVM$

Screenshots follow from ESXi 6.7U3. My ESXi server is otherwise fine. CPU: 8 CPUs x AMD Ryzen 7 2700X Eight-Core Processor, 32GB RAM

Thanks, David

cuckoo import ovf and vmdk into exsi 6_7U3 1 cuckoo import ovf and vmdk into exsi 6_7U3 2 cuckoo import ovf and vmdk into exsi 6_7U3 3 Cuckoo import error ESXi 6 7U3 1 Cuckoo import error ESXi 6 7U3 2

icurnet commented 4 years ago

a fix (change CuckooSRV.ovf, change vmx-16 to vmx-15, article lists vmx-13 for esxi 6.5, i run 6.7U3 so I exported one of my other VMs from my ESXi 6.7U3 server and that was the value in the ovf file.

ref: https://communities.vmware.com/thread/617046

icurnet commented 4 years ago

I was able to import the VM into ESXi 6.7U3, start it, and submit a sample but the virtual guest host does nothing...I was able to manually start the VM with Virtualbox.

Possible reason is the API calls are not in free products by VMware: ref: https://cuckoo.sh/docs/faq/index.html#what-do-i-need-to-use-cuckoo-with-vmware-esxi

I pose the same issue for VMWare Player 15.x, it's a free product and per the article above on the cuckoo documentation website, I suspect it also can not use the API to start/stop/revert the VM.

I am going to use the cuckoo docs and build my own guest VM on my infrastructure and see what happens.

David