Clipboard isolation for Linux guests

[rkourdis]

Hi @insidegui, thanks so much for your work on this fantastic app!

I'm trying to achieve host / guest isolation to safely run untrusted binaries under virtualization. With the new socket-based protocol, it seems that if I untick Enable VirtualBuddy Guest App during a Mac VM setup, the socket is not created at all so there's no way for communication from and to the guest OS (unless I'm missing something else?).

However, clipboard is always shared on Linux as the Spice agent is always created and connected to Linux guests. Is there interest for a new setting - for example Share Clipboard under Share Rosetta for Linux - to toggle this functionality on or off?

If so, I could have a look and open a PR at some point!

[insidegui]

I'm trying to achieve host / guest isolation to safely run untrusted binaries under virtualization. With the new socket-based protocol, it seems that if I untick Enable VirtualBuddy Guest App during a Mac VM setup, the socket is not created at all so there's no way for communication from and to the guest OS (unless I'm missing something else?).

That's not the case in the current 2.2 beta. It always creates the socket even if the guest app toggle is disabled in VM settings. That's a bug though, and I will address it for the 2.2 release.

However, clipboard is always shared on Linux as the Spice agent is always created and connected to Linux guests. Is there interest for a new setting - for example Share Clipboard under Share Rosetta for Linux - to toggle this functionality on or off?

Correct. I will also introduce a toggle for that.

[insidegui]

Implemented in #779

Will be on the next beta.

[rkourdis]

You're fantastic, thank you very much!