59
Is it possible to use a virtual machine to more safely run pirated games on linux? (lemmy.ml)
submitted 3 weeks ago by nootux@lemmy.ml to c/linux@lemmy.ml
67 comments fedilink hide all child comments

I am looking for help on how to run closed source / pirated games on linux within a virtual machine. I would like to start by saying if I could walk into a shop and buy with cash, a game on a CD like in the old days I would. I have recently become very privacy conscious and until I figure out a way to anonymously and privately purchase things like this I am going to stick with pirating. Also, it is helping me to archive content as everything seems to be moving online and I want to stick with offline applications / media etc in my control.

Now, I am familiar with virtualbox but of course, it is no good for gaming. I have read about other applications that offer much better performance with support for GPU passthrough or similar (but how does this affect the security side of things when running pirated games). Forgive me, this is all quite new to me.

What I want is a virtual machine capable of gaming so that I can more safely run pirated games on linux. Also, I am very new to linux and some help in how I should actually go about running games on linux in the first place. I do not want to just install steam because it has closed source elements and being more privacy conscious now, I’m not sure I want to. Though I am aware I can use the proton layer to enable gaming support which I believe is fully open source. For my purposes lutris sounds like it may be the route to go. Thoughts on this welcome.

As a side note, I am thinking of signing up to GOG as they, to me, seem like a better alternative to steam where I can actually own a DRM free copy of a game that I buy. On a pirating note I thought locating signed, hash checked GOG installers to be a good option for security for dipping my toe into pirating games on linux. I am much, much more comfortable with detecting and removing malware in a windows ecosystem. Linux, completely foreign. So I am trying to be careful.

Once I get fully set up I plan to buy the games I enjoy on GOG, I think that will be the path I can be most comfortable with. At the end of the day I will own a DRM free copy of the game itself. That is the best I can do where I cannot get it on physical media I think. I already do this for CD’s and DVD’s etc.

Any help would be appreciated, thank you.

top 50 comments
sorted by: hot top controversial new old
[-] edinbruh@feddit.it 47 points 3 weeks ago* (last edited 3 weeks ago)

First of all, don't expose yourself to danger. Get your pirated games from reputable sources.

Most games only need a Steam emulator like Goldberg's to run without license, and you can get clean steam files from cs.rin.ru. You don't need VMs for this, it's literally the original game.

If you need an actual crack, you can also look up on cs.rin.ru and try to gauge the reputation of the uploader. You can also check fitgirl or dodirepacks, they are both highly reliable. These are unlikely to have malware, but it's not impossible.

If you want to use a vm because you still don't trust the pirated game in question (reasonable), then there is no shortcut. Use the arch wiki to learn how to setup a VM with GPU passthrough, even if you don't use arch it's always a good place to get started.

[-] nootux@lemmy.ml 2 points 3 weeks ago

Thank you for your reply, this sounds on track to what I am looking for.

Very interesting on the clean file + emulator route. Sounds like a similar line of thinking to my signed / hash checked GOG installer thoughts.

Regarding using a VM with a GPU passthrough, what software would you recommend for doing this with? I am very familiar with virtualbox and do prefer a GUI though I recognise I will probably have to adapt in order to get what I want.

Thanks again.

[-] edinbruh@feddit.it 5 points 3 weeks ago

I forgot about the gog part. Yeah, you can also use those. There used to be a website that uploaded clean gog installers, but now all the download links are behind those sketchy filesharing services. Though, if you manage to get one, the binary should be signed by the developer. On windows I know you can check the signature by right-clicking on the file, on Linux I don't remember because I haven't needed it in a long time.

For the VM you need qemu/kvm. I suggest to use virt-manager which is just a graphical interface for qemu.

[-] nootux@lemmy.ml 2 points 3 weeks ago

Thank you, your responses have been most helpful.

Yup, I used to check the signature / hash for GOG installers in windows. I'll have to look into how to do it in linux.

I'll look into qemu/kvm. Virt-manager rings a bell. Thanks, I'll look into all of that.

Do you have any site recommendations for clean steam / gog files?

[-] edinbruh@feddit.it 2 points 3 weeks ago* (last edited 3 weeks ago)

For steam I already told in the previous comment, cs.rin.ru. You need an account to access the clean files threads.

For gog unfortunately not anymore. Check the r/piracy megathread, see if you find something

[-] nootux@lemmy.ml 2 points 3 weeks ago

Thank you for your response.

Apologies on missing that it was you that mentioned those sites, new to lemmy and viewing through the unread messages area where it only shows the current comment, not the thread. I am struggling to see something I can click to bring the message up in a thread so I can see the message flow.

Thank you for the clues, I shall disappear down a rabbithole some time following your breadcrumbs.

[-] edinbruh@feddit.it 3 points 3 weeks ago

Btw, I just remembered.

You said that "if you could go to the store, buy a disc with the game, like in the good old days" you would prefer that over piracy.

I do encourage you to buy games on GoG (Good Old Games), download the installer, and burn it on a blue ray disk for you to keep.

[-] nootux@lemmy.ml 4 points 3 weeks ago

I shall most likely be doing so. It is a means of owning the original install files for the game. From a privacy standpoint, still not as good as buying it in a shop with cash but it is most certainly a step in the right direction. There was a time when I pirated simply because I wanted to try things out for free when demos became less popular. Then it led to why bother buying it now. However, as I have matured I am happy, moreover I want to pay for something I have tried and enjoyed to support the creator so long as I have ownership and can do with it what I like. I do not want to support the conditional ownership systems that are developing, telling me how I may use something that I have purchased. Or that I do not truly own it such as is the case with most digital "purchases".

You seem very relatable in several areas I have identified, like minded and able to comprehend my point of view. Able to explain without condescension. I am new to socialising online (in general really, trying to step out of my shell). I found the fediverse on my travels to escape big tech, see my original post here. If you do not mind sharing your thoughts, where would you recommend looking for someone socially awkward, very concerned over privacy but not to the point where that becomes the central point of discussion as it can be a little triggering, a place to discuss things intellectually yet open and respectfully of one another?

I am just curious to hear your thoughts on this point. Thanks.

[-] edinbruh@feddit.it 2 points 3 weeks ago* (last edited 3 weeks ago)

I see, I'm not sure I can help you with that. I don't really engage with many communities outside of Lemmy. I just lurk in various other places.

Anyway, it looks to me like you are looking for an online bubble where to efficiently isolate yourself, this can't be good for you. I would suggest meeting with real people instead. Are you still a student? Maybe in university? Then you are probably surrounded by people your age with common interests to you, waiting for you to speak to them. Make friends, it will be fun.

That being said, I do share some of your social anxiety, so this is definitely a "do as I say, not as I do" kind of situation.

load more comments (2 replies)
load more comments (6 replies)
load more comments (2 replies)
[-] helix@feddit.org 12 points 3 weeks ago* (last edited 3 weeks ago)

tldr: use firejail. I already answered in your other thread: https://feddit.org/comment/13927222

You know you can cross-post so it shows up as cross-posted in other communities? You just need to hit that "copy" button once you posted the first one.

I'd have answered here instead of !piracy if I had seen that it's a crosspost.

[-] nootux@lemmy.ml 2 points 3 weeks ago

Thanks, I'll look into crossposting for going forwards.

I'll check out firejail. Thanks for the recommendation.

[-] borax7385@lemmy.world 8 points 3 weeks ago

I just use a different user with no privileges to run any pirated or suspicious software.

[-] nootux@lemmy.ml 2 points 3 weeks ago

Thank you, that is something to consider. What are your thoughts on sandboxing vs using a user with no privileges?

[-] borax7385@lemmy.world 6 points 3 weeks ago

Flatpak sandboxing is weak. For truly untrusted software like pirated games I'd definitely go for a different user which in Linux provides a very strong isolation.

[-] nootux@lemmy.ml 1 points 3 weeks ago

What about firejail vs a separate limited user account?

[-] borax7385@lemmy.world 2 points 3 weeks ago

I'm not familiar with firejail, sorry. I guess that firejail (or regular containers with podman) can be ok for CLI tools which only need access to very specific paths, if any. But for graphical applications like games you probably have to grant a lot of access.

Using a separate user is simpler and it's guaranteed that the software can only write to the home dir of the user (and other temp paths like /tmp that you don't care). In case of problems, just wipe the home dir and you are good.

[-] nootux@lemmy.ml 1 points 2 weeks ago

This sounds like a good idea. Thank you for taking the time.

[-] umbrella@lemmy.ml 7 points 3 weeks ago

you can with GPU passthrough. not a simple process though, and not all hardware supports it.

plus you need a dedicated gpu for the VM.

[-] DecentM 5 points 3 weeks ago

It's actually possible to do it with a single gpu but it's trickier than if you had two. You can use libvirt hooks to stop all graphical processes (and log your gui session out), unload the kernel drivers for the gpu, and start the VM with the now unused primary gpu. Then do the reverse when the VM stops and you're back to your login screen.

[-] umbrella@lemmy.ml 3 points 3 weeks ago

sounds unpractical af

[-] DecentM 4 points 3 weeks ago* (last edited 3 weeks ago)

On machines with just one gpu it's either that or no passthrough tbf

I set it all up as an automated step before a VM named "win" boots, and I can just start the vm and these steps happen on their own

[-] umbrella@lemmy.ml 2 points 3 weeks ago* (last edited 3 weeks ago)

oh for sure. upside is maybe it's an easier and better documented process now a few years later from my last attempt.

might be worth it for the annoying anticheat games.

[-] LiveLM@lemmy.zip 2 points 3 weeks ago

Pain in the ass, fickle as hell, most GPUs fuck up the Reset, in the end it is barely more practical than a dual boot.

[-] Shimitar@downonthestreet.eu 6 points 3 weeks ago

Quit thinking as a windows user now you are on Linux.

You running a pirated game with proton? Or looking to run windows inside Linux?

In any case run the game offline, disconnect the PC from internet and you should be safe.

What? It's an on line game? It's a game that need internet access to run? Then what are you complaining about? There is nothing you can do to be "safe".

Anyway running a windows game on linux with wine or proton should be safe enough from most of the possible threats (environment is too different). Running in a VM would be a serious hit on performances even if you use qemu+KVM (forget about virtual box) with all drivers set to passtrough and you give up your video card on Linux and pass it to windows

At that point, you are again at risk because e you are again running windows ...

Define your threat at least. That would make a response easier

My guess you are overthinking stuff.

[-] helix@feddit.org 13 points 3 weeks ago

Linux isn't inherently safer than Windows when running untrusted binaries, i.e. games.

There is a real possibility of user data being extracted or a virus infecting a WINE prefix. If you get a crypto trojan it doesn't matter if you're cool and on Linux, they still can encrypt all your precious family photos.

Please do not hand out potentially dangerous advice like "you should be safe". Sure, the architecture of Linux distributions make it harder for criminals to do things, but you're certainly not safe running untrusted binaries, even though Steam does some security analysis before games can be uploaded, and malware games are usually reported quickly.

[-] umbrella@lemmy.ml 2 points 3 weeks ago* (last edited 3 weeks ago)

while the risk you mention is very real and we should not be too complacent with it, i haven't seen any attack targeting linux users from pirated games in the wild.

hell, scene releases from trusted sources are usually slightly safer than the original game because of removed DRM phone-home bullshit.

plus wine and flatpak are enough to fuck with malware targeting only windows if you don't keep all permissions enabled, which you shouldn't.

[-] helix@feddit.org 2 points 3 weeks ago

Wine doesn't sandbox things though.

[-] umbrella@lemmy.ml 2 points 3 weeks ago

i know, but it may be different enough to break stuff.

[-] nootux@lemmy.ml 2 points 3 weeks ago

I would like to forget about windows, everything linux. So the VM would be linux using proton, my thought is that a vm isolates stuff inside it from the host os, thus allowing you to run malware inside the sandbox. Yes there is still a risk malware can get out, but far less of a threat than just running it in the host os. So, like I can do with applications and fully utilise the CPU, I'd like to do the same for the GPU.

I have heard that malware designed for windows can still run under linux due to the way wine / proton works. So I thought using a VM could offer a solution, or at least a step in the right direction.

What is an online game? Everything at the moment, when pirating, I am in control. Need no internet connection, no account, just execute and run like when I used to buy a game on a CD. That is why I am looking at GOG.

Can you recommend any tutorial videos for qemu and kvm setup and usage for linux?

My threat? I want to take precautions from installing malware on the linux system when running pirated games. Like on windows, running pirated applications in a vm. But I'd like to do it with games.

[-] helix@feddit.org 4 points 3 weeks ago* (last edited 3 weeks ago)

the VM would be linux using proton

Proton is not a VM, it's a translation layer for Windows API calls based on WINE.

Virtualisation (VMs), sandboxing and API translation layers are fundamentally different in both scope and application.

Proton does not give you any additional security, since Security By Obscurity is a broken concept.

I have heard that malware designed for windows can still run under linux due to the way wine / proton works.

This is correct.

[-] nootux@lemmy.ml 3 points 3 weeks ago

Ah I did mean that the VM would be using proton inside. i.e. proton would be running in the guest os. I think it was my bad wording.

Thanks for confirming what I'd heard about wine / proton not being the same as virtualisation when it comes to preventing malware from running just because it is now on linux. I am also fully aware that just because something is inside a vm, does not mean malware cannot escape. I am just trying to make it less likely.

[-] helix@feddit.org 1 points 3 weeks ago

You shouldn’t need a full VM running Proton. I’d rather use sonething more lightweight, i.e. sandboxing.

Most likely Windows games which are malicious don’t have a way to break out of Linux containment, so if you run all games as a different user with no access to your other files or inside a sandbox, there should be a negligible risk.

The chance of a Windows malware using Linux sandbox exploits is very very very small.

[-] nootux@lemmy.ml 2 points 3 weeks ago

Firejail is definitely something I'll be looking into on the sandboxing front as it may be the better solution from the sounds of it. How does a sandbox compare to running in a VM? Technically speaking, is the VM safer? Though I appreciate the difference in this scenario may be very small.

load more comments (7 replies)
[-] Kory@lemmy.ml 5 points 3 weeks ago

I'm running everything that is proprietary (Steam for example) on a second user that is a not an admin account. Heroic and the like are installed via Flatpak that is sandboxed. Sometimes games contain malware, even on Steam. If something goes badly wrong, I purge that second user.

[-] nootux@lemmy.ml 2 points 3 weeks ago

Sounds like a good idea, thank you for the suggestion.

[-] throwaway403@programming.dev 4 points 3 weeks ago

OP, FYI: GPU passthrough isn't riskless (OpSec-wise), unfortunately. This Hacker News thread contains pointers if you'd wish to read up on that.

[-] LiveLM@lemmy.zip 7 points 3 weeks ago

I'd like to think that attackers making malicious pirate releases will focus on the large Windows userbase rather than the 1% of the 1% running them inside passthrough VMs but I get the point.

load more comments (1 replies)
[-] Obnomus@lemmy.ml 2 points 3 weeks ago

If piratded games have malicious files its most likely for windows users, you can install repacks on Linux very easily though.

load more comments (9 replies)
[-] eclipse7@feddit.nu 2 points 3 weeks ago

QubesOS? :D

load more comments
view more: next ›
this post was submitted on 12 Jul 2026
59 points (100.0% liked)

Linux

66774 readers
490 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 7 years ago
MODERATORS
AgreeableLandscape@lemmy.ml
nooter692@lemmy.ml
MarcellusDrum@lemmy.ml
cypherpunks@lemmy.ml
cyclohexane@lemmy.ml
d3Xt3r@lemmy.nz