Intercept before it mounts.
At my school, USB keys circulate between computers all the time, and some of them carry malware. Most people just plug the drive in and grab their file — there's no moment to think about whether it's safe. Quartzine is my attempt at removing that risk without changing anyone's habits: catch the USB key before the OS mounts it, and give the option to open it inside a disposable VM instead of directly on the host.
This is a solo project I'm building and iterating on as I learn. It's not a finished product yet — see Status below for what actually works today.
When a USB drive is plugged into a Linux machine, Quartzine intercepts the event before udisks2 auto-mounts it, and lets you choose:
- Mount normally → standard OS behavior, nothing changes
- Open in a VM → the drive is passed through to a disposable virtual machine instead of the host
-
USB plugged in
-
udev rule blocks auto-mount, Quartzine daemon catches the event
-
Based on config, the usb is either mounted normally on in a VM (alpine) running on qemu/kvm
- Linux with KVM support
- Python 3.10+
git clone https://github.com/Mathos6/Quartzine
or
git clone git@github.com:Mathos6/Quartzine.git
Then:
sudo ./Quartzine/configd/install.sh
The root's password is esther
There is another user named mathieu and his password is esther too.
Run:
configd/uninstall.sh
Early development, built and maintained solo. This is a learning project as much as a security tool.
Planned:
- Host-side observation layer (eBPF/bpftrace)
- Network isolation + traffic inspection
- Report generation after a session
Warning
Not ready for production use yet but it does the job
GNU General Public License v3.0 — see LICENSE for details.