How to detect virtualization 虚拟机检测

简介: 除了下面的方法外,mac地址也可以检测虚拟机。Update: You may be interested in [[the perl module|perl-module-for-virtualization-detection]] implementing these tricks.

除了下面的方法外,mac地址也可以检测虚拟机。
Update: You may be interested in [[the perl module|perl-module-for-virtualization-detection]] implementing these tricks.

Frequently, our customers want to install our software in a virtual machine. This can be OK, but frequently they hit a CPU, memory, or IO limit caused by running in a constrained virtual environment. When this happens, we really like to know if they’re running under virtualization when we try to support them. Here’s some tricks to detect, from a shell, if the system is virtualized.

The first thing to check is dmesg. On a recently-booted system, checking the ‘dmesg’ command output may be sufficient. Otherwise, try “cat /var/log/dmesg” instead of “dmesg”

 

  • VMWare:
     # dmesg | grep -i virtual
     VMware vmxnet virtual NIC driver
       Vendor: VMware    Model: Virtual disk      Rev: 1.0
     hda: VMware Virtual IDE CDROM Drive, ATAPI CD/DVD-ROM drive
    
  • QEmu or KVM:If the “-cpu host” option has not been used, QEmu and KVM will identify themselves as:
     # dmesg | grep -i virtual
     CPU: AMD QEMU Virtual CPU version 0.9.1 stepping 03
    

    otherwise, the host’s CPU information will be used both in dmesg, or in /proc/cpuinfo.

    However, you should see something like:

     $ dmesg | grep -i virtual
     [    0.000000] Booting paravirtualized kernel on KVM
    

    on newer kernels that understand that they’re running under paravirtualization. (Thanks to René Pfeiffer for pointing this out)

  • Microsoft VirtualPC:
     # dmesg | grep -i virtual
     hda: Virtual HD, ATA DISK drive
     hdc: Virtual CD, ATAPI CD/DVD-ROM drive
    
  • Xen (thanks, wardi and others)
    # dmesg | grep -i xen
    Xen virtual console successfully installed as tty1
    
  • Virtuozzo
    # dmesg
    (returns no output)
    
    # cat /var/log/dmesg
    (returns no output)
    
    # ls -al /proc/vz
    veinfo  veinfo_redir  veredir  vestat  vzaquota  vzdata
    

On longer-running systems, you may need to grep /var/log/dmesg instead.

If that doesn’t produce anything useful, try using dmidecode to look at the BIOS information. Frequently, there will be at least one component identifying itself as virtualized:

  • VMWare:
     # dmidecode | egrep -i 'manufacturer|product'
     Manufacturer: VMware, Inc.
     Product Name: VMware Virtual Platform
    
  • Microsoft VirtualPC:
     # dmidecode | egrep -i 'manufacturer|product'
     Manufacturer: Microsoft Corporation
     Product Name: Virtual Machine
    
  • QEMU or KVM:
     # dmidecode | egrep -i 'vendor'
     Vendor: QEMU
    
  • Virtuozzo:
     # dmidecode
     /dev/mem: Permission denied
    
  • Xen:
     # dmidecode | grep -i domU
           Product Name: HVM domU
    

You should just examine the output of dmidecode directly rather than trying to grep as above, in case the output changes. QEMU, for example, doesn’t report the vendor in all versions.

Next, check disk devices for identification as virtualized:

  • VMWare:
    # cat /proc/ide/hd*/model
    VMware Virtual IDE CDROM Drive
    # cat /proc/scsi/scsi
    Attached devices:
    Host: scsi0 Channel: 00 Id: 00 Lun: 00
      Vendor: VMware   Model: Virtual disk     Rev: 1.0
      Type:   Direct-Access                    ANSI SCSI revision: 02
    
  • Microsoft VirtualPC:
    # cat /proc/ide/hd*/model
    Virtual HD
    Virtual CD
    
  • QEMU, KVM, or Xen:
    # cat /proc/ide/hd*/model
    QEMU HARDDISK
    QEMU DVD-ROM
    
  • Virtuozzo:
    # ls -al /dev/vzfs
    b-----x--- 1 root root 0, 19 2009-04-06 15:04 /dev/vzfs
    
目录
相关文章
|
存储 安全 虚拟化
虚拟机检测技术剖析
作者:riusksk (泉哥) 主页:http://riusksk.blogbus.com 前言 在当今信息安全领域,特别是恶意软件分析中,经常需要利用到虚拟机技术,以提高病毒分析过程的安全性以及硬件资源的节约性,因此它在恶意软件领域中是应用 越来越来广泛。
1354 0
|
2月前
|
Ubuntu 网络安全 虚拟化
VMware虚拟机ping不通原因排查及分析
下面以 VMware 虚拟机为例进行介绍。
1520 3
|
2月前
|
存储 SQL 数据库
虚拟化数据恢复—Vmware虚拟机误还原快照的数据恢复案例
虚拟化数据恢复环境: 一台虚拟机从物理机迁移到ESXI虚拟化平台,迁移完成后做了一个快照。虚拟机上运行了一个SQL Server数据库,记录了数年的数据。 ESXI虚拟化平台上有数十台虚拟机,EXSI虚拟化平台连接了一台EVA存储,所有的虚拟机都存放在EVA存储上。 虚拟化故障: 工组人员误操作将数年前迁移完成后做的快照还原了,也就意味着虚拟机状态还原到数年前,近几年数据都被删除了。 还原快照相当于删除数据,意味着部分存储空间会被释放。为了不让这部分释放的空间被重用,需要将连接到这台存储的所有虚拟机都关掉,需要将不能长时间宕机的虚拟机迁移到别的EXSI虚拟化平台上。
123 50
|
3月前
|
安全 虚拟化 数据中心
Xshell 连接 VMware虚拟机操作 截图和使用
Xshell 连接 VMware虚拟机操作 截图和使用
100 4
|
7月前
|
Unix Linux 虚拟化
虚拟机VMware知识积累
虚拟机VMware知识积累
|
3月前
|
Linux 虚拟化
vmware虚拟机安装2024(超详细)
vmware虚拟机安装2024(超详细)
478 6
|
3月前
|
虚拟化 网络虚拟化 网络架构
虚拟机 VMware Workstation 16 PRO 的网络配置
虚拟机 VMware Workstation 16 PRO 的网络配置
116 2

热门文章

最新文章