# xmount mit Homebrew, apt, dnf installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für xmount in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:xmount ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install xmount ``` Evidenz: local Homebrew formula metadata ### Linux - Debian apt (92%): ```sh sudo apt install xmount ``` Evidenz: Debian stable package indexes: xmount from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install xmount ``` Evidenz: Fedora Rawhide package metadata: xmount from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst ## Paketfakten - **Paketschlüssel:** brew:xmount - **Paketmanager:** Homebrew - **Version:** 1.3.1 - **Quellzusammenfassung:** Convert between multiple input & output disk image types - **Homepage:** - **Generiert:** 2026-08-03T19:37:03+00:00 ## Executables - xmount (Alias) ## Installationsverhalten - Bottle: nicht verfügbar ## Version und Aktualität - Seite generiert: 2026-08-03 - Manager-Version: 1.3.1 ## Projektgeschichte und Nutzung xmount is a digital-forensics utility for exposing one disk-image format as another through FUSE. Its core trick is on-the-fly conversion: a raw, EWF, AFF, VDI, or QCOW-style evidence image can be mounted as a virtual raw, DMG, VHD, VDI, or VMDK-like image without first making a full converted copy. ### Projektgeschichte The original project page at pinguin.lu describes the older xmount line, credits Guy Voncken for the idea and bug help, and notes that the project later moved to SITS. The current SITS page is the maintained project home and points to the SITS Git repository and releases. The SITS README documents a modernized 1.x architecture with external input libraries and morphing libraries. That design lets xmount support forensic formats through libraries such as libewf and AFF/AFF4 implementations while also handling operations such as combining multiple images, RAID0 reconstruction, byte swapping, and extraction of unallocated sectors. ### Adoptionsgeschichte xmount's adoption is forensic-practitioner adoption rather than mass developer adoption. It entered Debian/Ubuntu packaging, which the SITS page explicitly acknowledges, and it appears in security distributions such as Kali because investigators frequently need to bridge evidence-image formats and virtualization tools. SANS Internet Storm Center coverage captures the practical appeal: xmount is handy when a workflow needs DD, EWF, or AFF input and a format that can be consumed by analysis or virtualization tooling. The SITS page makes the same point with booting acquired images in QEMU, KVM, VirtualBox, or VMware while redirecting writes to a cache file. ### Wie es verwendet wird A typical xmount workflow mounts an acquired disk image read-mostly through FUSE, exposes a virtual output image in the requested format, and then attaches that output to forensic tools or a virtual machine. Virtual write support redirects changes into a cache file so the original evidence image is not modified. More advanced usage uses morphing: multiple image segments can be combined, RAID0 member disks can be reconstructed, and selected filesystem regions can be presented as a derived virtual image. That makes xmount useful in the awkward middle of a case, where evidence format, analysis tool, and hypervisor all expect different disk-image conventions. ### Warum Paket-Nerds sich dafür interessieren xmount is a good example of a package that exists because copying giant images is the wrong abstraction. The package value is not a new archive format; it is the Unix move of presenting a virtual filesystem facade over messy real-world evidence formats. For package nerds, it also sits at the crossroads of FUSE, forensic image libraries, and VM disk formats. Installing one CLI can remove several slow, lossy, or storage-heavy conversion steps from an incident-response workstation. ### Zeitleiste - Pre-2024: The original pinguin.lu project page documents xmount 0.7-era features such as CMake, multiple input images, image morphing, and internal EWF support. - 2024-03-13: The current SITS GitLab project is created. - 2024-2026: The SITS README copyright span and releases document the maintained 1.x line under SITS. - 2020s: xmount remains packaged in forensic/security-oriented distributions for mounting and converting evidence disk images through FUSE. ### Related projects - Guymager is the forensic acquisition tool credited by xmount's project pages and linked from the acknowledgments. - libewf and afflib provide support for common forensic evidence image formats used by xmount. - FUSE is the user-space filesystem layer that lets xmount present virtual converted disk images without writing a full output copy. - QEMU, KVM, VirtualBox, and VMware are common consumers of xmount's virtual output images. ### Quellen - - - - - - ## Sicherheitshinweise broad file, network, media, or database tool signal. - **Geiger-Risiko:** blue / mittel - broad file, network, media, or database tool signal ## Andere Paketmanager-Einträge - Debian apt - xmount - 1.2.0+ds-1+b1: normalized package name match | Debian stable package indexes: xmount from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for crossmounting between disk image formats | https://www.sits.lu/xmount - Ubuntu apt - xmount - 0.7.6-3build2: normalized package name match | Ubuntu 24.04 LTS package indexes: xmount from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for crossmounting between disk image formats | https://www.pinguin.lu/ - dnf - xmount - 1.3.1-1.fc45: normalized package name match | Fedora Rawhide package metadata: xmount from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A on-the-fly convert for multiple hard disk image types | https://www.sits.lu/xmount ## Combined YAML source View the package source record on GitHub. [combined/xmount.yml](https://github.com/mxcl/pkgdb/blob/main/combined/xmount.yml) ## Quellen - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph