diff options
| author | Radoslav Gerganov <rgerganov@vmware.com> | 2020-09-25 02:04:09 -0700 |
|---|---|---|
| committer | Dmitry Vyukov <dvyukov@google.com> | 2020-10-10 11:58:52 +0200 |
| commit | 4a77ae0bdc5cd75ebe88ce7c896aae6bbf457a29 (patch) | |
| tree | f6e97682c59e708acc25fa4f8e9f66602b2b8037 /docs/linux | |
| parent | b74c49a6af84e6ab50018024e8862263b1e0bd6d (diff) | |
vm: implement the VM interface for VMware Workstation
Use the "vmrun" utility to manage Workstation VMs. The syzkaller manager
creates temporary VMs (linked clones) from a base image, gets their IP
address and uses ssh to deploy and run programs (similar to the isolated
mode).
Diffstat (limited to 'docs/linux')
| -rw-r--r-- | docs/linux/setup_ubuntu-host_vmware-vm_x86-64-kernel.md | 34 |
1 files changed, 33 insertions, 1 deletions
diff --git a/docs/linux/setup_ubuntu-host_vmware-vm_x86-64-kernel.md b/docs/linux/setup_ubuntu-host_vmware-vm_x86-64-kernel.md index a2add0030..3ac29c0c0 100644 --- a/docs/linux/setup_ubuntu-host_vmware-vm_x86-64-kernel.md +++ b/docs/linux/setup_ubuntu-host_vmware-vm_x86-64-kernel.md @@ -74,6 +74,38 @@ Stopping the VM: vmrun stop $VMPATH/debian.vmx ``` +If all of the above `vmrun` commands work, then you can proceed to running syzkaller. + ## syzkaller -Once you start the VM and get its IP address, you can use syzkaller to fuzz the VM in [isolated](/docs/linux/setup_linux-host_isolated.md) mode. +Create a manager config like the following, replacing the environment variables $GOPATH, $KERNEL and $VMPATH with their actual values. + +``` +{ + "target": "linux/amd64", + "http": "127.0.0.1:56741", + "workdir": "$GOPATH/src/github.com/google/syzkaller/workdir", + "kernel_obj": "$KERNEL", + "sshkey": "$IMAGE/key", + "syzkaller": "$GOPATH/src/github.com/google/syzkaller", + "procs": 8, + "type": "vmware", + "vm": { + "count": 4, + "base_vmx": "$VMPATH/debian.vmx", + } +} +``` + +Run syzkaller manager: + +``` bash +mkdir workdir +./bin/syz-manager -config=my.cfg +``` + +Syzkaller will create linked clone VMs from the `base_vmx` VM and then use ssh to copy and execute programs in them. +The `base_vmx` VM will not be started and its disk will remain unmodified. + +If you get issues after `syz-manager` starts, consider running it with the `-debug` flag. +Also see [this page](/docs/troubleshooting.md) for troubleshooting tips. |
