How to prevent dual booted OSes from damaging each other?
- by user1252434
For better compatibility and performance in games I'm thinking about installing Windows additionally to Linux. I have security concerns about this, though.
Note: "Windows" in the remaining text includes not only the OS but also any software running on it. Regardless of whether it comes included or is additionally installed, whether it is started intentionally or unintentionally (virus, malware).
Is there an easy way to achieve the following requirements:
Windows MUST NOT be able to kill my linux partition or my data disk
neither single files (virus infection) nor overwriting the whole disk
Windows MUST NOT be able to read data disk (- extra protection against spyware)
Linux may or may not have access to the windows partition
both Linux and Windows should have full access to the graphics card
this rules out desktop VM solutions
for gaming I want the manufacturer's windows graphics card driver
Regarding Windows to be unable to destroy my linux install: this is not just the usual paranoia, that has happened to me in the past. So I don't accept "no ext4 driver" as an argument. Once bitten, twice shy. And even if destruction targeted at specific (linux) files is nearly impossible, there should be no way to shred the whole partition. I may accept the risk of malware breaking out of a barrier (e.g. VM) around the whole windows box, though.
Currently I have a system disk (SSD) and a data disk (HDD), both SATA. I expect I have to add another disk. If i don't: even better. My CPU is a Intel Core i5, with VT-x and VT-d available, though untested.
Ideas I've had so far:
deactivate or hide other HDs until reboot at low level
possible? can the boot loader (grub) do this for me?
tiny VM layer: load windows in a VM that provides access to almost all hardware, except the HDs
any ready made software solution for this? Preferably free.
as I said: the main problem seems to be to provide full access to the graphics card
hardware switch to cut power to disks
commercial products expensive and lots of warnings against cheap home built solutions
preferably all three hard disks with one switch (one push)
mobile racks - won't wear of daily swapping be a problem?
