Deploying Linux analysis VMs

Install Linux dependencies:

apt install hatching-binaries-linux

We're now going to deploy one or more analysis VMs using HatchVM.

Before running HatchVM, make sure the hatching-sandbox-net service is running. This can be done as follows:

systemctl restart hatching-sandbox-net

Starting the hatching-sandbox-net service requires that a sandbox.yaml configuration file, as created by the triage-setup script, exists. It does not matter if the Hatching Sandbox configuration contains machines that don't exist (yet).

Place one or more of the following YAML configurations in /var/lib/sandbox/vms/. See Creating VM YAMLs for more information about these files.

We can start the generation of the VMs after adding the configurations of all desired VMs. Follow the steps mentioned at Starting a VMs build to start the generation process.

Debian

bookworm (12)

• armhf
• mipsel

Note: mipsbe is not supported after Debian 10

Ubuntu

• Bionic
• Focal
• Jammy
• Noble

Note: x86_64 only

Red Hat Enterprise Linux

• RHEL 8.9
• RHEL 9.3

Note: x86_64 only

Deprecated images

Debian stretch (9)

• armhf
• mipsbe
• mipsel

Note: Debian stretch has been End of Support since 2022 and is provided for compatibility purposes.