Add VMDK Test Image for OSV-Scalibr

Related PR: google/osv-scalibr#1295

Related issue: google/osv-scalibr#1215

Signed-off-by: Yuvraj Saxena <ysaxenax@gmail.com>

Author: 0xXA

vmdk/Dockerfile

@@ -0,0 +1,13 @@
+FROM ubuntu:22.04
+
+RUN apt-get update
+
+RUN mkdir -p /testdata
+
+# Set working directory
+WORKDIR /testdata
+
+# Copy valid .vmdk file into the container
+COPY valid-fat32-ext.vmdk /testdata/valid-fat32-ext.vmdk
+
+CMD ["/bin/bash"]

vmdk/README.md

@@ -0,0 +1,26 @@
+# OSV-Scalibr: VMDK Extractor
+
+This directory contains a test Dockerfile for validating OSV-Scalibr's VMDK Extractor plugin. A VMDK (Virtual Machine Disk) file is a disk image format commonly used by virtual machines to emulate a physical hard drive.
+
+## Setup
+
+### Build the Docker Image
+
+```bash
+cd security-testbeds/vmdk
+docker build -t vmdk-extractor-testbed .
+```
+
+### Run the Container
+
+```bash
+docker run -it --rm vmdk-extractor-testbed /bin/bash
+```
+
+### Running OSV-Scalibr
+
+Build or copy the `scalibr` binary to the current directory, and inside the container, run `scalibr` with the vmdk extractor:
+
+```bash
+./scalibr --extractors=embeddedfs/vmdk --result=output.textproto valid-fat32-ext.vmdk
+```

vmdk/genvmdk.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+dd if=/dev/zero of=valid.img bs=1M count=256
+parted -s --align optimal valid.img --script mklabel gpt
+parted -s --align optimal valid.img --script mkpart primary ext4 0% 25%
+parted -s --align optimal valid.img --script mkpart primary ntfs 25% 100%
+parted -s --align optimal valid.img --script set 2 msftdata on
+sudo losetup -fP valid.img
+LOOPDEV=$(losetup -j valid.img | cut -d: -f1)
+PARTITION1="${LOOPDEV}p1"
+PARTITION2="${LOOPDEV}p2"
+sudo mkfs.ext4 $PARTITION1
+sudo mkfs.vfat -F 32 $PARTITION2
+sudo rm -rf /mnt/valid*
+sudo mkdir /mnt/valid1
+sudo mkdir /mnt/valid2
+sudo mount ${PARTITION1} /mnt/valid1
+sudo mount ${PARTITION2} /mnt/valid2
+openssl genrsa -out private-key.pem 4096
+sudo cp private-key.pem /mnt/valid1/private-key1.pem
+sudo cp private-key.pem /mnt/valid2/private-key2.pem
+sudo umount /mnt/valid1
+sudo umount /mnt/valid2
+sudo losetup -d ${LOOPDEV}
+sudo rm -rf /mnt/valid*
+sudo rm -f valid.img
+qemu-img convert valid.img -O vmdk valid-fat32-ext.vmdk
+rm private-key.pem