# qemu QEMU is a generic open-source machine emulator and virtualizer. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Security evaluations find traditional virtual machines inadequate for containing cyber-capable autonomous agents DevFeed: [Security evaluations find traditional virtual machines inadequate for containing cyber-capable autonomous agents]() Original publisher: [Read original article]() Author: Olimpiu Pop Published: 2026-09-17T07:07:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [virtual machines](), [Security](), [Vulnerabilities](), [Linux Kernel](), [qemu](), [Firecracker](), [systems]() Tags: [agent-escape-vm](), [ai-security](), [development](), [devops](), [firecracker](), [linux](), [linux-kernel](), [news](), [qemu](), [security](), [security-breach](), [virtual-machines](), [virtualization](), [vm](), [vulnerabilities]() ### AI overview Security evaluations found that a cyber-capable autonomous agent escaped standard QEMU and KVM virtual machine configurations by exploiting kernel and library vulnerabilities. Firecracker contained the agent in testing, but the agent still hardlocked the host through Linux kernel flaws. ### Source excerpt Traditional virtual machines are inadequate for isolating cyber-capable autonomous agents. Tests using GPT-5.6-Cyber indicated multiple escape attempts due to kernel flaws. While Firecracker provided some containment, vulnerabilities remained. The study underscores the need for minimal attack surface virtualisation technologies and rapid, proactive patching strategies to safeguard host systems. By Olimpiu Pop ## Sound Open Firmware 2.15 Released With AMD ACP 7.x Support, Intel UAOL DevFeed: [Sound Open Firmware 2.15 Released With AMD ACP 7.x Support, Intel UAOL]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-15T13:04:40Z Content type: release Language: en Sources: [Phoronix]() Topics: [Embedded Software Dev](), [Open Source](), [intel](), [Security](), [qemu](), [Xtensa](), [Fuzzing/Fuzz testing](), [POSIX](), [Testing]() Tags: [desktop-linux](), [driver](), [dsp](), [firmware](), [fuzzing](), [intel](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [open](), [open-source-graphics](), [phoronix](), [phoronix-test-suite](), [posix](), [processor](), [qemu](), [security](), [testing](), [ubuntu-benchmarks](), [ubuntu-hardware](), [usb](), [xtensa]() ### AI overview Sound Open Firmware 2.15 adds user-space, memory-protected module execution, AMD ACP 7.x and NXP i.MX8MP support, Intel UAOL USB audio offload, testing targets, security hardening, and new audio processing modules. ### Source excerpt Sound Open Firmware as the open-source, vendor-independent audio DSP firmware stack and driver framework is out today with a new feature update... ## QEMU Google Summer of Code 2026 project report DevFeed: [QEMU Google Summer of Code 2026 project report]() Original publisher: [Read original article]() Published: 2026-09-15T07:00:00Z Content type: article Language: en Sources: [QEMU]() Topics: [qemu](), [AdventureX 2025](), [Open Source](), [virtual machines](), [x86](), [observability](), [Rust]() Tags: [cpu](), [development](), [google-summer-of-code](), [gsoc](), [internships](), [observability](), [open-source](), [qemu](), [rust]() ### AI overview QEMU's Google Summer of Code 2026 report covers four contributors' open-source projects from May through August, including lazy snapshot loading, x86 Process Context Identifier support in COCONUT-SVSM, and observability support for confidential virtual machines. ### Source excerpt QEMU participated in Google Summer of Code 2026 with 4 contributors working on open source internships from May through August. The contributors gained experience in open source software development working on 12-week projects. ## Run Zephyr on ESP32 with QEMU: no board required DevFeed: [Run Zephyr on ESP32 with QEMU: no board required]() Original publisher: [Read original article]() Author: John Lee Published: 2026-09-15T00:00:00Z Content type: tutorial Language: en Sources: [Blog on Developer Portal]() Topics: [Zephyr RTOS](), [ESP32](), [qemu](), [Espressif](), [Emulator](), [Embedded Software Dev](), [SDK]() Tags: [blog](), [boot](), [bootloader](), [build](), [debugger](), [emulator](), [esp32](), [esp32-c3](), [esp32-c6](), [esp32-s3](), [espressif](), [firmware](), [flash](), [gdb](), [install](), [qemu](), [sdk](), [toolchain](), [tutorial](), [zephyr]() ### AI overview This tutorial explains how to install and use the Espressif QEMU fork to build and run Zephyr firmware for emulated ESP32, ESP32-S3, ESP32-C3, and ESP32-C6 targets without physical boards. It covers Simple Boot and MCUboot/sysbuild workflows, debugger attachment through GDB, and the relevant Zephyr SDK toolchain setup. ### Source excerpt Install the Espressif QEMU fork and run Zephyr on emulated ESP32, ESP32-S3, ESP32-C3, and ESP32-C6 targets without a physical board. ## Caught Sleeping at Work(queue) -- Zephyr Podcast #050 DevFeed: [Caught Sleeping at Work(queue) -- Zephyr Podcast #050]() Original publisher: [Read original article]() Author: Benjamin Cabé Published: 2026-09-11T12:46:06Z Content type: news Language: en Sources: [Zephyr Project]() Topics: [WebAssembly](), [qemu](), [ESP32](), [ctf](), [Espressif](), [Arduino](), [RISC-V](), [cortex m4](), [Ethernet](), [Modbus](), [USB](), [Linux]() Tags: [blog](), [ctf](), [esp32](), [espressif](), [ethernet](), [linux](), [modbus](), [perfetto](), [podcast](), [qemu](), [risc-v](), [usb](), [webassembly](), [zephyr]() ### AI overview Episode 50 of the Zephyr podcast covers the Zephyr Developer Summit schedule, Analog Devices' acquisition of Alif Semiconductor, new sensor and board support, SMP coredump improvements, CTF trace conversion to Perfetto, WebAssembly Micro Runtime documentation, and other Zephyr developments. ### Source excerpt ADI buys Alif, WebAssembly in Zephyr, CTF traces reach Perfetto, and why you should never sleep in the system workqueue. ## Any Nix package, live in your browser DevFeed: [Any Nix package, live in your browser]() Original publisher: [Read original article]() Author: Simon Willison Published: 2026-09-10T23:44:15Z Content type: article Language: en Sources: [Simon Willison's Weblog]() Topics: [Nix](), [WebAssembly](), [qemu](), [x86](), [GitHub Actions](), [Pull Request]() Tags: [browser](), [code-review](), [code-review-16](), [github-actions](), [github-actions-72](), [linux](), [linux-54](), [qemu](), [webassembly](), [webassembly-131](), [x86]() ### AI overview The article describes trynix.dev, which runs an x86_64 Linux virtual machine in the browser using qemu-wasm and WebAssembly. It can boot Nix packages from the past 13 years, including Python 3.6.2, and supports URL-addressable interactive shells. It also highlights trynix-preview, a GitHub Action that links pull requests to browser-based builds without servers. ### Source excerpt Any Nix package, live in your browser Farid Zakaria calls this his "magnum opus of Nix work", and I can see why. trynix.dev provides a qemu-wasm powered x86_64 Linux virtual machine running entirely in your browser through WebAssembly. That VM can then be booted with any Nix package from the past 13 years. They are URL addressable, so you can navigate to this page: https://trynix.dev/?pkg=python3%403.6.2 Then click "Load" and get an interactive shell against a virtual machine running Python 3.6.2 from 2017. Farid is building all sorts of neat things on top of this. One recent example: Review a pull request by booting it introduces trynix-preview, described like this: GitHub action that comments a link on a pull request which lets you boot the PR's build in the browser using https://trynix.dev. No servers, just browsers. Via Lobste.rs Tags: code-review, linux, webassembly, github-actions ## 150,000 Commits Later -- Zephyr Podcast #048 DevFeed: [150,000 Commits Later -- Zephyr Podcast #048]() Original publisher: [Read original article]() Author: Benjamin Cabé Published: 2026-08-28T15:10:59Z Content type: article Language: en Sources: [Zephyr Project]() Topics: [Code](), [ci](), [Hardware](), [Microcontroller](), [qemu](), [Raspberry Pi](), [ESP32-C3]() Tags: [blog](), [ci](), [code](), [esp32-c3](), [hardware](), [podcast](), [qemu](), [raspberry-pi-5]() ### AI overview Zephyr Podcast #048 covers Zephyr's main branch reaching 150,000 commits, increased pull-request activity, a batch-based merge experiment, AI-assisted commits, custom debug adapters, new VirtIO and I2C libraries, test monitoring, and expanded hardware and QEMU support. ### Source excerpt Pre-orders open for the Arduino VENTUNO Q, and what $300 actually buys you 150,000 commits in main, and 1,455 PRs merged in August against 700 a year ago Create your... ## 150,000 Commits Later -- Zephyr Podcast #048 DevFeed: [150,000 Commits Later -- Zephyr Podcast #048]() Original publisher: [Read original article]() Author: Benjamin Cabé Published: 2026-08-28T15:10:59Z Content type: news Language: en Sources: [Zephyr Project]() Topics: [Code](), [ci](), [debug](), [qemu](), [ESP32](), [Raspberry Pi](), [Arduino]() Tags: [arduino](), [blog](), [ci](), [code](), [debug](), [esp32](), [podcast](), [qemu](), [raspberry-pi](), [zephyr]() ### AI overview Zephyr Podcast #048 covers the project's main branch reaching 150,000 commits, increased pull-request merging in August, a trial merge-batch workflow, and new or updated hardware, driver, testing, and QEMU support. It also discusses a custom debug adapter and an I2C register-set library. ### Source excerpt Pre-orders open for the Arduino VENTUNO Q, and what $300 actually buys you 150,000 commits in main, and 1,455 PRs merged in August against 700 a year ago Create your... ## QEMU version 11.1.0 released DevFeed: [QEMU version 11.1.0 released]() Original publisher: [Read original article]() Published: 2026-08-11T23:56:00Z Content type: release Language: en Sources: [QEMU]() Topics: [qemu](), [virtualization](), [version](), [Availability](), [Arm](), [cpu](), [RISC-V](), [virtio]() Tags: [announce](), [arm](), [availability](), [bugs](), [cache](), [changelog](), [ci](), [cpu](), [documentation](), [gui](), [qemu](), [qemu-11-1](), [release](), [releases](), [risc-v](), [testing](), [version](), [virtio](), [virtualization]() ### AI overview QEMU 11.1.0 has been released with more than 3,200 commits from 285 authors. The release adds or improves emulation, virtualization, GUI, architecture, firmware, and accelerator support, including UFS features, ARM and RISC-V capabilities, nested virtualization, and new machine and board support. ### Source excerpt We'd like to announce the availability of the QEMU 11.1.0 release. This release contains 3200+ commits from 285 authors. ## Паравиртуализация при отладке графических приложений KasperskyOS в QEMU DevFeed: [Паравиртуализация при отладке графических приложений KasperskyOS в QEMU]() Original publisher: [Read original article]() Author: denis\_molodyakov ("Лаборатория Касперского") Published: 2026-08-11T14:29:29Z Content type: tutorial Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [qemu](), [ci]() Tags: [ci](), [gpu](), [kasperskyos](), [qemu](), [tag-3bc896470be0](), [tag-9d72402955ce](), [tag-a7f27c878c10](), [tag-c9b6af447c74](), [tag-e5df878d9cd9](), [virtio](), [wayland]() ### AI overview A KasperskyOS graphics team lead describes the challenges of providing distributed developers with access to target hardware for operating-system and driver development. The article introduces their use of paravirtualization with QEMU as a way to address these development and debugging constraints. ### Source excerpt Привет! Меня зовут Денис Молодяков, я -- тимлид команды графики в KasperskyOS. Мы отвечаем за разработку графического стека полного цикла для микроядерной ОС: от создания низкоуровневых графических драйверов до всего необходимого для фреймворков. Современная реальность разработки диктует новые правила: удаленка и распределенные команды стали нормой. Моя команда не исключение -- ребята базируются в разных регионах. При этом каждому разработчику требуется доступ к аппаратным платформам для сборки, запуска ОС, написания и отладки драйверов. Обеспечение каждого сотрудника полным набором плат сопряжено с серьезными логистическими и финансовыми затратами. В этой статье я хочу рассказать, как мы искали оптимальное решение этой проблемы и почему пришли к использованию методики паравиртуализации. Читать далее ## Proxmox VE Helper-Scripts: guía y buenas prácticas DevFeed: [Proxmox VE Helper-Scripts: guía y buenas prácticas]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-04T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [Proxmox](), [Bash](), [Script](), [Command-line interface](), [qemu](), [GitHub]() Tags: [bash](), [community](), [github](), [http](), [proxmox](), [qemu](), [root](), [script](), [scripts](), [shell]() ### AI overview This guide explains what Proxmox VE Helper-Scripts are, how community-scripts.org uses Bash scripts to deploy applications in LXC containers or QEMU virtual machines, and how the main script downloads and runs the required components. It also highlights the security risk of executing third-party code as root on a Proxmox hypervisor. ### Source excerpt Qué son los Proxmox VE Helper-Scripts de community-scripts.org, cómo despliegan LXC y VMs con un solo comando y qué riesgos de seguridad debes valorar. ## KVM y libvirt: virtualización nativa en Linux DevFeed: [KVM y libvirt: virtualización nativa en Linux]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-01T09:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [Linux](), [qemu](), [Kernel](), [Proxmox]() Tags: [bios](), [kvm](), [linux](), [proxmox](), [qemu](), [uefi]() ### AI overview A Spanish tutorial on setting up KVM, QEMU, and libvirt for native Linux virtualization without Proxmox. It explains the roles of the components, hardware-virtualization requirements, distribution-specific package differences, and non-root VM management. ### Source excerpt Instala KVM y libvirt en Linux sin Proxmox: crea máquinas virtuales con virt-install, gestiónalas con virsh y configura la red por defecto. ## How Chainguard Uses Hardware-Virtualized Sandboxes to Isolate AI Agents and Untrusted Code DevFeed: [How Chainguard Uses Hardware-Virtualized Sandboxes to Isolate AI Agents and Untrusted Code]() Original publisher: [Read original article]() Published: 2026-07-29T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard](), [Artificial Intelligence](), [Security](), [Code](), [qemu](), [Containers]() Tags: [ai](), [ai-agents](), [chainguard](), [code](), [hardware](), [kvm](), [sandboxes](), [security]() ### AI overview Chainguard describes applying its build-isolation approach to sandboxing AI agents and other untrusted code. The approach uses fresh hardware-virtualized QEMU/KVM environments with their own kernels to limit blast radius and prevent persistence or access to sensitive signing materials. ### Source excerpt AI agents need sandboxes. Learn how Chainguard uses microVMs to safely run untrusted code, contain exploits, and protect sensitive workloads. ## Haiku Activity & Contract Report, June 2026 DevFeed: [Haiku Activity & Contract Report, June 2026]() Original publisher: [Read original article]() Author: waddlesplash Published: 2026-07-14T03:30:00Z Content type: article Language: en Sources: [Haiku Project]() Topics: [virtualization](), [qemu](), [Kernel](), [Linux](), [intel]() Tags: [2026](), [activity-report](), [contractor](), [debugging](), [intel](), [kernel](), [linux](), [qemu](), [report](), [virtualization]() ### AI overview Haiku's June 2026 activity report covers revisions hrev59754 through hrev59820. It highlights the merger of NVMM, a NetBSD Virtual Machine Monitor port that provides hardware-accelerated virtualization support for QEMU, into the Haiku tree. The implementation remains disabled by default because complex guest operating systems crash during boot on both Intel and AMD hosts. ### Source excerpt This report covers hrev59754 through hrev59820. NVMM The thing that should be the biggest news item this month is that the GSoC 2024 work to port "NVMM", the NetBSD Virtual Machine Monitor (which runs on more than just NetBSD, despite the name), providing hardware-accelerated virtualization support for QEMU, was finally merged. Unfortunately it still doesn't fully work, so it's still disabled by default: hence, it's only a minor news item, unfortunately. The code is now at least fully integrated with the Haiku tree, and all necessary kernel changes (including a number of bugfixes and the implementation of a handful of minor new features) has been completed, so the code shouldn't "bitrot" any further, and it's much easier to build, test, and work on it than it was when it was on a slowly-rotting branch. Additionally, I (waddlesplash) implemented support for AMD hosts (the GSoC project only implemented enough for Intel hosts), cleaned up a lot of the code, and implemented a number of performance improvements while at it. The primary problem symptom is that guest OSes of any real complexity (Haiku included, but also Linux, etc.) crash in strange but apparently deterministic ways late in their boot process: e.g. trying to access memory that apparently isn't even mapped. The crashes don't appear to be race-sensitive and happen similarly on bare metal as well as in nested virtualization in VMs, on both Intel and AMD hosts. Unfortunately all attempts at debugging the problems so far haven't led anywhere, but hopefully a solution will eventually be found, so that Haiku can finally gain virtualization support. You can follow along or chime in about this on the corresponding forum thread. Applications nephele dropped some disabled code implementing a "hamburger menu" from WebPositive. He also changed the URL input bar to handle empty URLs better, and improved the appearance of the "Go" button. apl changed HaikuDepot's prompt asking about anonymous statistics collection to def ## QEMU version 11.0.0 released DevFeed: [QEMU version 11.0.0 released]() Original publisher: [Read original article]() Published: 2026-04-22T16:11:00Z Content type: release Language: en Sources: [QEMU]() Topics: [qemu](), [version](), [virtualization](), [systems](), [x86](), [Arm](), [RISC-V](), [cpu](), [virtio](), [C++](), [gdb]() Tags: [arm](), [availability](), [c-plus-plus](), [changelog](), [ci](), [cpu](), [documentation](), [download](), [gdb](), [kvm](), [qemu](), [qemu-11-0](), [release](), [releases](), [risc-v](), [testing](), [updates](), [virtio](), [virtualization](), [x86]() ### AI overview QEMU 11.0.0 is released with more than 2,500 commits from 237 authors. Highlights include a new Nitro accelerator for AWS Nitro Enclaves, expanded accelerator and confidential VM support, new architecture features, and updates to device emulation, plugins, drivers, and debugging. ### Source excerpt We'd like to announce the availability of the QEMU 11.0.0 release. This release contains 2500+ commits from 237 authors. ## Gentoo GNU/Hurd Released with QEMU Boot Image Build Scripts DevFeed: [Gentoo GNU/Hurd Released with QEMU Boot Image Build Scripts]() Original publisher: [Read original article]() Published: 2026-04-01T00:00:00Z Content type: release Language: en Sources: [GNU Hurd]() Topics: [GNU/Hurd](), [Unix](), [Kernel](), [qemu]() Tags: [2026](), [announcement](), [distributed](), [gnu-hurd](), [ipc](), [linux](), [qemu](), [replacement](), [unix]() ### AI overview Gentoo GNU/Hurd has been released. The announcement points to scripts for building a working image that can boot in QEMU and describes GNU Hurd as a replacement for the Unix kernel. ### Source excerpt Gentoo GNU/Hurd released! Details. " The year is 2026 and Gentoo is perhaps ready for an advanced kernel: the GNU Hurd. [...] Scripts to build a working image that can be booted in QEMU can be found at https://codeberg.org/thesamesam/gentoo-hurd (will move that to Gentoo infra). " Read the announcement email. The GNU Hurd is the GNU project's replacement for the Unix kernel. It is a collection of servers that run on the Mach microkernel to implement file systems, network protocols, file access control, and other features that are implemented by the Unix kernel or similar kernels (such as Linux). More detailed. GNU Mach is the microkernel upon which a GNU Hurd system is based. It provides an Inter Process Communication (IPC) mechanism that the Hurd uses to define interfaces for implementing in a distributed multi-server fashion the services a traditional operating system kernel provides. More detailed. ## GNU/Hurd developments and fixes in Q1 2026 DevFeed: [GNU/Hurd developments and fixes in Q1 2026]() Original publisher: [Read original article]() Published: 2026-03-02T06:07:00Z Content type: news Language: en Sources: [GNU Hurd]() Topics: [GNU/Hurd](), [Linux](), [kernels](), [Debian](), [bug](), [C](), [Deadlock](), [Documentation](), [Claude](), [qemu]() Tags: [2026](), [bug](), [c](), [claude](), [deadlock](), [debian](), [documentation](), [gnu-hurd](), [hardware](), [linux](), [qemu]() ### AI overview A Q1 2026 GNU/Hurd project update reports debugging and fixes across SMP, threading, filesystem, IPC, networking, and related components, along with wiki documentation and hardware-installation guidance. ### Source excerpt Hello! Welcome to a new qoth. This qoth covers new and interesting GNU/Hurd developments in Q1 of 2026! Details. Brent W. Baccala debugged some x86_64 SMP issues with a Claude AI bot. The bot did not contribute any code. It just found some incorrect code that Damien then fixed. It did get some things wrong, but it was incredibly helpful pointing out several problems. You can read its report here. Joshua Branson tweaked the hurd wiki. The most helpful addition is this page, which documents how to flash a working qemu hurd image directly to an HDD or SSD. This is a really easy way to install the Hurd on real hardware! Buy a supported machine from this page and give it a shot! Consider this another reminder that the Hurd project could use more documentation writers. It's an easy way to contribute. As a fun fact, Joshua wrote this qoth on the Hurd running on a T420 with 12 GB of RAM! Running Debian GNU/Hurd on bare metal these days is largely fairly stable. Emacs, i3, netsurf, and luakit all work just fine and most of the Debian package archive compiles without issue on the Hurd. Etienne Brateau fixed a compilation error. He also provided a simple test program that exposed a rather serious threading bug, which Samuel promptly fixed. This is a good reminder that writing simple C test programs that successfully run on Linux, but fail on the Hurd can have a large impact. Gianluca Cannata worked on our httpfs translator. Diego Nieto Cid added a daemon-wait option for console-client. This can help users with slow machines avoid a broken Hurd console. He also fixed a rumpdisk compilation issue. Mike Kelley fixed a deadlock in SMP enabled GNU Mach kernels. He also fixed a page fault in amd64 SMP kernels. He fixed another deadlock in the alarm () function. He fixed a panic when running large builds without the mach-defpager. He also fixed some of our signal related code. He worked with Samuel to investigate an odd bug. Their detailed investigation uncovered and lead to a fix in ## Announcing QEMU Google Summer of Code 2026 internships DevFeed: [Announcing QEMU Google Summer of Code 2026 internships]() Original publisher: [Read original article]() Published: 2026-02-20T07:00:00Z Content type: release Language: en Sources: [QEMU]() Topics: [qemu](), [Google](), [Open Source]() Tags: [2026](), [google-summer-of-code](), [gsoc](), [internship](), [internships](), [open-source](), [qemu](), [remote]() ### AI overview QEMU announces its participation in Google Summer of Code 2026, offering paid remote internships from May through August. Interns will work with experienced QEMU developers and contribute through the project's standard open source process. ### Source excerpt QEMU is participating in Google Summer of Code once again! Google Summer of Code is an open source internship program with internships running May through August. Would you like to experience contributing to an open source project? This paid remote work internship opportunity is a great way to get involved! ## Safe Yolo Mode: Running LLM Agents in VMs with Libvirt and Virsh DevFeed: [Safe Yolo Mode: Running LLM Agents in VMs with Libvirt and Virsh]() Original publisher: [Read original article]() Author: Chris Hager Published: 2026-02-10T00:00:00Z Content type: tutorial Language: en Sources: [Chris Hager]() Topics: [LLMs](), [virtualization](), [Security](), [Linux](), [qemu](), [ssh]() Tags: [linux](), [llm-agents](), [llms](), [security](), [tool-use](), [virtual-machines]() ### AI overview A guide to isolating LLM agents in Linux virtual machines with libvirt and virsh. It explains how VM isolation can reduce risks from destructive operations and unauthorized access when agents receive broad tool-use permissions, and covers setup, cloud-image provisioning, VM creation, and SSH access. ### Source excerpt This is a guide for isolating LLM agents in virtual machines, using libvirt and virsh on Linux servers. Running LLMs in VMs isolates them from the host system, mitigating numerous security risks such as destructive operations or unauthorized file access (i.e. private keys, secrets, credentials for communication tools). This is particularly important when granting LLM agents broad permissions, like auto-approving tool use ("yolo mode"). It's also useful to keep sessions running for extended periods of time, and to interact with agents from the phone / on the go. ## Hardware testing automation: a minimum viable product DevFeed: [Hardware testing automation: a minimum viable product]() Original publisher: [Read original article]() Published: 2026-01-21T00:00:00Z Content type: release Language: en Sources: [postmarketOS Blog]() Topics: [Automation](), [Testing](), [Integration testing](), [GitLab](), [ci](), [Tooling](), [qemu](), [Kernel](), [boot](), [Embedded Software Dev](), [deploy](), [x86]() Tags: [automation](), [boot](), [ci](), [firmware](), [gitlab](), [hardware](), [integration-testing](), [kernel](), [postmarketos](), [qemu](), [testing](), [x86]() ### AI overview The postmarketOS team reports a minimum viable hardware-testing automation system now integrated into its regular development workflow. It provides QEMU runners and a OnePlus 6T real-hardware runner in GitLab, supports integration testing on device runners, and describes related PCB revisions and control firmware. ### Source excerpt Since our last update in May we have continued working on hardware-testing automation. We are happy to announce that we have reached an important milestone: we are now testing the OnePlus 6T as part of our regular development workflow! If you are not sure why this is important, or want to read more about the design decisions and the different parts that compromise the system, you can find all the information in the previous blog post. Work done and current status Since May, the system that we designed has been put in place. To make it possible, the following work has been executed: 4 QEMU runners available, 2 for x86_64, 1 for aarch64, and 1 for armv7 are now available in GitLab, and can be used in any project. This can be done importing the corresponding tags. Thanks Oliver and Martin R. for setting these up! A OnePlus 6T runner is now also available in GitLab, which means that if selecting this device, tests will run on real hardware. You can see a full demo video of the device booting up in here. Thanks Martin R. and Clayton for setting it up! Thanks to Martin R. and Pablo, support for integration testing on the device-runners is now available in our GitLab (!17, !19, !20) and integrated in: postmarketos-mkinitfs (!63) boot-deploy (!81) pmaports (!6696, !7553, !7489) Thanks to Federico and Nicola, the PCB to control the hardware went through 3 revisions: The first revision (v0.1) included just 2 assembled boards, and other empty ones for debugging. The PCBs were received, and although non-functional, most issues could be debugged successfully. The second version (v0.2) included the fixes from the first revision, and consisted already of 5 fully assembled PCBs. This version is already good enough for being used to power the OnePlus 6T in Martin R.'s farm. The third revision (v0.3), has some small fixes, and potentially support for buttons for Samsung (and maybe other) devices. This order is a bigger batch of 20 boards to distribute to Trusted Contributors, and sho ## QEMU version 10.2.0 released DevFeed: [QEMU version 10.2.0 released]() Original publisher: [Read original article]() Published: 2025-12-24T23:12:00Z Content type: release Language: en Sources: [QEMU]() Topics: [qemu](), [version](), [Availability](), [io\_uring](), [Arm](), [RISC-V](), [migration](), [virtio]() Tags: [announce](), [arm](), [availability](), [bugs](), [changelog](), [ci](), [documentation](), [features](), [google](), [improvements](), [io-uring](), [migration](), [performance](), [qemu](), [qemu-10-2](), [release](), [releases](), [risc-v](), [testing](), [virtio]() ### AI overview QEMU 10.2.0 has been released, with over 2,300 commits from 188 authors. Highlights include FreeBSD 9pfs support, live VM updates through cpr-exec migration, io_uring performance improvements, expanded ARM and RISC-V emulation, and additional fixes and device support. ### Source excerpt We'd like to announce the availability of the QEMU 10.2.0 release. This release contains 2300+ commits from 188 authors. ## exploits.club Weekly(ish) Newsletter 93 - Old QEMU Bugs, Android Auto Bluetooth PoCs, BeeStation P20, and More DevFeed: [exploits.club Weekly(ish) Newsletter 93 - Old QEMU Bugs, Android Auto Bluetooth PoCs, BeeStation P20, and More]() Original publisher: [Read original article]() Author: exploits.club Published: 2025-12-11T16:24:59Z Content type: article Language: en Sources: [exploits.club]() Topics: [qemu](), [Exploit](), [vulnerability](), [Synology](), [Hardware](), [HTTP](), [container]() Tags: [bugs](), [exploit](), [exploits](), [firmware](), [hardware](), [newsletter](), [qemu](), [synology](), [vault](), [vulnerability](), [weekly]() ### AI overview This issue of the exploits.club Weekly(ish) Newsletter rounds up security write-ups and resources, including a QEMU privilege-level bug that can enable arbitrary writes, a Synology BeeStation exploit involving a stack-based buffer overflow, and research into the Cypherock X1 Vault hardware wallet. The supplied text ends before the final item is complete. ### Source excerpt Welcome back to your favorite "mostly weekly but sometimes whenever we feel like it" newsletter. Annnnnnyways 👇 In Case You Missed It... HEXACON Videos Are OUT Advent Of Pwn - PwnCollege's Advent Of Pwn ends today. If you haven't already given it a go, make ## QEMU at Google Summer of Code Mentor Summit 2025 DevFeed: [QEMU at Google Summer of Code Mentor Summit 2025]() Original publisher: [Read original article]() Author: Stefano Garzarella Published: 2025-11-20T08:00:00Z Content type: news Language: en Sources: [QEMU]() Topics: [qemu](), [Google](), [Open Source](), [macOS](), [Rust](), [POSIX]() Tags: [conferences](), [event](), [germany](), [google-summer-of-code](), [gsoc](), [internships](), [macos](), [open-source](), [posix](), [qemu](), [rust]() ### AI overview A report on the 2025 Google Summer of Code Mentor Summit in Munich, where QEMU mentors discussed open source challenges, mentorship practices, and related projects. The article also describes a GSoC project extending Rust crates for vhost-user devices on macOS and BSD. ### Source excerpt The Google Summer of Code (GSoC) Mentor Summit 2025 took place from October 23rd to 25th in Munich, Germany. This event marks the conclusion of the annual program, bringing together mentors from all over the world. QEMU had another successful year with several interesting projects (details on our organization page), and it was a pleasure for me to represent the QEMU community at the summit, joining mentors from over 100 open source organizations to discuss the program, share experiences, and talk about open source challenges. ## Recovering Data from an Abandoned Server and Converting a MySQL Database to SQLite DevFeed: [Recovering Data from an Abandoned Server and Converting a MySQL Database to SQLite]() Original publisher: [Read original article]() Author: Jan-Piet Mens Published: 2025-08-30T22:00:00Z Content type: article Language: en Sources: [Jan-Piet Mens]() Topics: [data](), [Databases](), [SQLite](), [Content Management System](), [Disk image](), [MySQL](), [container](), [mount](), [Server](), [Proxmox](), [qemu](), [USB]() Tags: [content-management-system](), [data](), [database](), [jan-piet-mens](), [jpm](), [jpmens](), [mount](), [mysql](), [proxmox](), [qemu](), [sqlite]() ### AI overview A friend asks the author to recover data from an abandoned server once used to run a proprietary content management system. The author networks the machine, accesses its Proxmox-hosted container, extracts the disk image, copies the data, creates a MySQL dump, and converts it to a SQLite database for viewing. ### Source excerpt Three years ago, a friend of mine purchased a server (one of those horrendously loud things most of us mere mortals thankfully seldom or never get to hear) from a hosting company. The server held a to-him precious application served by a proprietary content management system. He abandoned the CMS at the time because, as I understand it, the monthly price of the CMS was to increase four-fold. Stuck in a basement, the server itself gathered more dust for three years until my friend decided he wanted the data. The hosting company had told him "just connect it to the internet and you can access your data" which, obviously, is total bollocks - it begins with not owning the domain and ends with a hard-coded IP which belongs to said hosting company. He asked me for help. I sighed. I helped. For the first time in quite some years I really got my hands dirty, so to speak. I went to his house at 17:30 and got home again past midnight. I was, though, given a nice dinner, and the lady of the house had baked my favorite cake! I'd brought a router/switch which we used to get this screaming beast lying on the table before us networked. I then had to remember what little I knew of Proxmox, and got as far as seeing there was a qemu container with id 100. The guest tools (if I recall the name correctly) weren't installed in the container so I couldn't do much from outside, but I was able to vzdump the container into a file on the host which thankfully had sufficient disk space. After extracting that dump I had the disk image which I could losetup / mount, and a chroot later I was "in". I asked for and received a small brandy. I copied the data onto a portable USB disks (my can those things be slow!) and created a MySQL dump of the database. All in all some 20 GB of data were shuffled in and out. This morning, then finally, I discovered an absolutely gorgeous little tool called mysql2sqlite with which I created a SQLite database file which I zipped up and sent to my friend with the in [Next page]()