VMware

This Question is Possibly Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (6 pts)
5 Replies Last post: Jun 30, 2009 9:43 AM by continuum  

Zero out VM images posted: Jun 27, 2009 3:10 AM

Click to view NSITPS's profile Enthusiast
NSITPS
56 posts since
Jan 25, 2009

At this current time what is the best method for zeroing out un populated areas of VMDKs prior to image level backups - Also, is it safe and does it work?

Thanks

Re: Zero out VM images

1. Jun 27, 2009 7:35 AM in response to: NSITPS
Click to view Texiwill's profile Guru
Texiwill
10,213 posts since
Jan 13, 2004
Hello,

Moved to Security forum.

If your VMDK format is Zeroed Thick then the unpopulated blocks are zeroed by default. The same for Eager Zeroed Thick. If you use Thin disks then this is not the case but unallocated/unpopulated blocks will not be part of your backup either.

I am not sure there is a way to zero the unpopulated blocks. If there is it is something you would use from within the Guest OS.


Best regards,
Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009, Virtualization Practice Analyst
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security: Securing the Virtual Environment'
Also available 'VMWare ESX Server in the Enterprise'
SearchVMware Pro|Blue Gears|Top Virtualization Security Links|Virtualization Security Round Table Podcast

Re: Zero out VM images

2. Jun 27, 2009 11:49 AM in response to: Texiwill
Click to view NSITPS's profile Enthusiast
NSITPS
56 posts since
Jan 25, 2009

What I am getting at is this:

When files are deleted within the guest OS bits are left behind which are included in image backups (vRanger etc) - I have read that you can zero areas on disk and thus not back them up...

I have seen people refer to sdelete and the shrink option within vmware tools.......

I want to know if sdelete - shrink is still the option which should be used to accomplish this????

Not sure this is meant for the security area though...

Thanks

Re: Zero out VM images

3. Jun 27, 2009 1:43 PM in response to: NSITPS
Click to view continuum's profile Guru
continuum
12,680 posts since
Dec 18, 2003
have a look here
http://www.feyrer.de/g4u/#shrinkimg
it lists several tools for various guest types

___________________________________

VMX-parameters- VMware-liveCD - VM-Sickbay

Re: Zero out VM images

4. Jun 30, 2009 9:09 AM in response to: NSITPS
Click to view Texiwill's profile Guru
Texiwill
10,213 posts since
Jan 13, 2004
Hello,

Zeroing out anything within a VM is really a security/anti-forensics issue. However, now that I know the specifics what Continuum has mentioned is the place to start your research.


Best regards,
Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009, Virtualization Practice Analyst
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security: Securing the Virtual Environment'
Also available 'VMWare ESX Server in the Enterprise'
SearchVMware Pro|Blue Gears|Top Virtualization Security Links|Virtualization Security Round Table Podcast

Re: Zero out VM images

5. Jun 30, 2009 9:43 AM in response to: Texiwill
Click to view continuum's profile Guru
continuum
12,680 posts since
Dec 18, 2003
it is also useful to safe time with backups ...

___________________________________

VMX-parameters- VMware-liveCD - VM-Sickbay

Actions

VMware Developer

SDKs, APIs, Videos, Learn and much more in the Developer community.

Learn More

Developer Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

VMware vSphere

Come witness the next giant leap in virtualization.

Register Today

Communities