pietrushnic

RemoteVM PoC Guide (Qubes Air)

Version: v2025.09.23

This guide reproduces two RemoteVM demonstrations:

• Single-host PoC (relay-only) that mirrors the TC_10_RemoteVMMixin integration test
• Mixed 4.3 ↔ 4.2 PoC using SSH (ProxyJump) without changing Qubes firewall rules

pietrushnic

#cloud-config
mounts:
- ["/dev/xvdb1", "/storage", "ext4", ""]
rancher:
    docker:
        tls: true
        graph: "/storage/docker"
        storage_driver: overlay

pietrushnic

#cloud-config
mounts:
- ["/dev/xvdb1", "/storage", "ext4", ""]
rancher:
    docker:
        graph: "/storage/docker"
        storage_driver: overlay

pietrushnic

#cloud-config
mounts:
- ["/dev/xvdb1", "/storage", "ext4", ""]

pietrushnic

#!/bin/bash
TFTP_SERVER="[email protected]"
ISO_URL=https://updates.xcp-ng.org/isos/8.1/xcp-ng-8.1.0-prefinal2.iso
# ISO_URL=https://updates.xcp-ng.org/isos/8.0/xcp-ng-8.0.0.iso
ISO_FILE_NAME=$(basename ${ISO_URL})

# get xcp-ng image
[ ! -f ${ISO_FILE_NAME}  ] && wget ${ISO_URL}

# mount

pietrushnic

<installation>
  <keymap>pl</keymap>
  <primary-disk>sdc</primary-disk>
  <source type="url">http://updates.xcp-ng.org/netinstall/8.1/</source>
  <admin-interface name="eth0" proto="dhcp"/>
  <timezone>Europe/Warsaw</timezone>
</installation>

pietrushnic

Keybase proof

I hereby claim:

• I am pietrushnic on github.
• I am pietrushnic (https://keybase.io/pietrushnic) on keybase.
• I have a public key whose fingerprint is E030 9B2D 85A6 7E84 6329 E34B B2EE 71E9 67AA 9E4C

To claim this, I am signing this object:

pietrushnic

[1:32:31] pietrushnic:hello_world git:(arm) $ make BOARD=nucleo_f411re debug
make[1]: Entering directory '/path/to/src/zephyr-project'
make[2]: Entering directory '/path/to/src/zephyr-project/samples/hello_world/outdir/nucleo_f411re'
  Using /path/to/src/zephyr-project as source for kernel
  GEN     ./Makefile
  CHK     include/generated/version.h
  CHK     misc/generated/configs.c
  CHK     include/generated/offsets.h
  CHK     misc/generated/sysgen/prj.mdef
Open On-Chip Debugger 0.9.0-dirty (2016-08-02-16:04)

pietrushnic

DEBUG: Executing shell function do_compile
NOTE: make -j 4 MAKEFLAGS=-j 4 OE_QMAKE_COMPILER=arm-poky-linux-gnueabi-gcc  -march=armv7-a -marm -mfpu=neon  -mfloat-abi=hard -mcpu=cortex-a9 --sysroot=/home/pietrushnic/storage/wdc/projects/2016/vitro_tv/i.mx6-kiosk/src/poky-repo/poky/build/tmp/sysroots/vitro OE_QMAKE_CC=arm-poky-linux-gnueabi-gcc  -march=armv7-a -marm -mfpu=neon  -mfloat-abi=hard -mcpu=cortex-a9 --sysroot=/home/pietrushnic/storage/wdc/projects/2016/vitro_tv/i.mx6-kiosk/src/poky-repo/poky/build/tmp/sysroots/vitro OE_QMAKE_CXX=arm-poky-linux-gnueabi-g++  -march=armv7-a -marm -mfpu=neon  -mfloat-abi=hard -mcpu=cortex-a9 --sysroot=/home/pietrushnic/storage/wdc/projects/2016/vitro_tv/i.mx6-kiosk/src/poky-repo/poky/build/tmp/sysroots/vitro OE_QMAKE_CFLAGS= -O2 -pipe -g -feliminate-unused-debug-types -fdebug-prefix-map=/home/pietrushnic/storage/wdc/projects/2016/vitro_tv/i.mx6-kiosk/src/poky-repo/poky/build/tmp/work/cortexa9hf-neon-poky-linux-gnueabi/qtwebengine/5.7.0+gitAUTOINC+dbf7dd2742_29c16917b3-r0=

pietrushnic

coreboot-4.4-1987-g8a7ddf7 Mon Oct 31 10:52:00 UTC 2016 romstage starting...
BSP Family_Model: 00730f01 
cpu_init_detectedx = 00000000 
agesawrapper_amdinitreset() entry
CBFS: 'Master Header Locator' located CBFS at [100:7fffc0)
CBFS: Locating 'AGESA'
CBFS: Found @ offset 5ffec0 size 7b0e0
CBFS: 'Master Header Locator' located CBFS at [100:7fffc0)
CBFS: Locating 'AGESA'
CBFS: Found @ offset 5ffec0 size 7b0e0