Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hyper-V VM connection issues after running "Standard" #363

Closed
ghost opened this issue May 12, 2024 · 5 comments
Closed

Hyper-V VM connection issues after running "Standard" #363

ghost opened this issue May 12, 2024 · 5 comments
Labels
bug Something isn't working

Comments

@ghost
Copy link

ghost commented May 12, 2024

I casually opened hyper-v to test ubuntu server and as hyper-v is the best for bare metal virtualization.That mistake cost me my whole day.Browsing microsoft forums all day couldn't give me an answer.I was about to Rage Install Linux as Host OS until i remembered that i ran an important script which must have caused the malfunction.

I used the reverse privacy-script.bat to undo changes and the VM ran smoothly after that.Like i don't know which part of the script is causing this.But if you use the script in any windows Hyper-V available version you can replicate the process like this:

After using the privacy script,you go right to hyper-v and test any OS to run as a VM.It will show the problems like screenshots given below:
Screenshot 2024-05-12 095611_LI
Screenshot 2024-05-12 101031_LI

I would like to ask @undergroundwires as if there is any way to fix this issue by not reversing the whole script.Now the thing is i am not gonna sell my privacy just for some virtual machine nor i am wanna keep myself away from using virtual machine and ALSO I SUPPORT THE CONTRIBUTIONS OF THIS PROJECT from my heart.I would have donated if i had cash,too bad for me.

I have also read an old Issue from users that they've experienced windows sandbox getting broken after using the script and the owner documented it very well.

@ghost ghost added the bug Something isn't working label May 12, 2024
@undergroundwires
Copy link
Owner

Hi @0xReverse, do you have the script file you executed (you have it if you used the desktop app)? Or did you run any of the presets?

@undergroundwires
Copy link
Owner

You can generate different combinations. I wonder about your configuration. Or did you just try "Standard", "Strict"?

I'd be happy to take action if you can figure out which script has caused this otherwise.

@undergroundwires
Copy link
Owner

I could reproduce this on both Windows 11 Pro 23H2 and Windows 10 22H2 using Hyper-V and an Ubuntu VM.

I found that it's Enable strong RSA key requirement causes this, reverting it solves the issue.

This using Standard (binary search tree with bisect) and found out that Enable strong RSA key requirement causes this. Looking to its docs, we really want to keep them on "Standard":

image

But as it breaks Hyper-V connection, I believe we have to move it to Strict with a document about it breaking Hyper-V machine something like (breaks Hyper-V VMs).

Thank you for the bug report and the context.

@undergroundwires
Copy link
Owner

Yes reverting only "RSA Key Requirement" will solve the issue.
Please report back if it solves for you or does not work.

The rest of the Standard is OK.
It should not in anyway interfere with Windows Update, or its a critical bug.

We cannot granularity control this config, once it applies, it applies to all system connections.

My further tests show that Docker, wsl, and Windows Sandbox work fine. This impacts only Hyper-V VM connection, connections to other virtualization-based solutions work fine.

@undergroundwires undergroundwires changed the title Help Regarding Hyper-V and Virtualization.Not a complain but i need smoll help :) Hyper-V VM connection issues after running "Standard" May 19, 2024
undergroundwires added a commit that referenced this issue May 22, 2024
This commit improves the documentation of RSA key handling script and
changes its recommendation level to address potential issues with
Hyper-V (as reported in #363).

Changes:

- Add documentation to describe potential disruptions caused by stronger
  RSA key requirements.
- Move RSA key script from 'Standard' to 'Strict' due to its impact on
  Hyper-V VMs.
- Use bullet points for easier expansion in cautions of secret key
  hardening scripts.
@undergroundwires
Copy link
Owner

0.13.4 is just released 🎉. Actions taken:

  • Add documentation to describe potential disruptions caused by stronger RSA key requirements.
  • Move RSA key script from 'Standard' to 'Strict' due to its impact on Hyper-V VMs.

Thank you @0xReverse.

Please create new issues for further ideas/problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant