copying real Hard disk image to make KVM?

[Guy]

Hi all,

I've made a DD copy of a harddrive running a linux system and I now need to make the image run under proxmox for forensic purposes.

What's the best/simplest way to make this DD image runnable from within proxmox.

Cheers,
---Guy

 

[tom]

Hi all,

I've made a DD copy of a harddrive running a linux system and I now need to make the image run under proxmox for forensic purposes.

What's the best/simplest way to make this DD image runnable from within proxmox.

Cheers,
---Guy

mount this image in a existing Linux KVM guest (I mean transform this image to a qemu image file and add it, then mount).

 

[mangoo]

mount this image in a existing Linux KVM guest (I mean transform this image to a qemu image file and add it, then mount).

It's not necessary to convert it to qemu image file to be able to access it.
Although it might save some space - leave the original untouched, make copies converted to qcow2.

 

[Guy]

hmmm I converted the image to qcow2 but it does not like to boot from it.

 

[tom]

hmmm I converted the image to qcow2 but it does not like to boot from it.

as you want to analyze data, you should not change anything or boot from this image. boot from another system (e.g. a Linux live cd) and mount the disk.

by doing this, you can also analyze the boot problem (missing bootloader, MBR).