Attach USB-storage to dom0

Is there any way to attach usb-drive to dom0 without removing sys-usb?

1 Like

You can do this using qvm-usb / qvm-block CLI tool e.g.:

qvm-block attach dom0 sys-usb:sda
1 Like

Does this method bypass the insecurities of USB by isolating the data block, or does it simply attach the USB to dom0 and show it as a block device?

Yes.

For example, attaching a full USB-device offers more attack surface than attaching a single block device, while attaching a full block device (e.g. sda) again offers more attack surface than attaching a single partition (e.g. sda1), since the targetVM doesn’t have to parse the partition-table. (Attaching a full block device offers the advantage that most file-managers will mount and display them correctly, whereas they don’t expect single partitions to be added and therefore don’t handle them correctly.)

1 Like