virtualbox-logo-small

Oracle VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use.

Support inttf:

Buy Me a Coffee:

This guide shows howto install VirtualBox 7.2 (currently 7.2.6) on Debian 13 (Trixie) and Debian 12 (Bookworm) using Oracle’s own apt repo.

1. Install Oracle’s VirtualBox 7.2.6 on Debian 13 / 12 (Oracle repo)

This guide works with UEFI Secure Boot disabled or enabled. If you keep Secure Boot enabled, follow this step-by-step module signing guide:

Debian Secure Boot: Howto sign VirtualBox kernel modules (DKMS + .run installer)

1.1. Change root user

You should perform package management and installation steps as root. Use:

su -
## OR ##
sudo -i

After switching to root, run the following commands without sudo:

1.2. Install required packages

apt update
apt install ca-certificates curl gnupg

1.3. Add Oracle VirtualBox apt repository key

curl -fsSL https://www.virtualbox.org/download/oracle_vbox_2016.asc \
  | gpg --dearmor \
  | tee /usr/share/keyrings/oracle-virtualbox-2016.gpg > /dev/null

1.4. Add Oracle VirtualBox apt repository

Debian 13 (Trixie)

echo "deb [arch=amd64 signed-by=/usr/share/keyrings/oracle-virtualbox-2016.gpg] https://download.virtualbox.org/virtualbox/debian trixie contrib" \
  | tee /etc/apt/sources.list.d/virtualbox.list

Debian 12 (Bookworm)

echo "deb [arch=amd64 signed-by=/usr/share/keyrings/oracle-virtualbox-2016.gpg] https://download.virtualbox.org/virtualbox/debian bookworm contrib" \
  | tee /etc/apt/sources.list.d/virtualbox.list

Update package list:

apt update

1.5. Install dependency packages

VirtualBox kernel modules are built using DKMS.

apt install build-essential dkms linux-headers-$(uname -r)

1.5.1 Disable UEFI Secure Boot or Check Howto Sign VirtualBox Kernel Modules

Check is UEFI Secure Boot Enabled or Disabled

mokutil --sb-state

This guide works with UEFI Secure Boot disabled or enabled.

  • If you prefer the simple path, disable Secure Boot.
  • If you want to keep Secure Boot enabled, you must sign the VirtualBox kernel modules. Follow this step-by-step module signing guide:

Debian Secure Boot: Howto sign VirtualBox kernel modules (DKMS + .run installer)

1.6. Install VirtualBox Latest Version 7.2 (currently 7.2.6)

apt install virtualbox-7.2

Note:

  • Package is virtualbox-7.2 (not virtualbox).
  • This creates automatically vboxusers group and VirtualBox user must be member of that group.

1.7. Build / rebuild VirtualBox kernel modules

1.7.1 Secure Boot disabled

Normally DKMS builds modules automatically, but if you get module errors, run:

/sbin/vboxconfig

1.7.2 Secure Boot enabled

If you have UEFI Secure Boot enabled with custom module signing keys (from Page 2), use this approach:

## First, rebuild modules without signing ##
/sbin/vboxconfig

## Then manually sign the rebuilt modules ##
KERNELVER=$(uname -r)
SIGNFILE=/usr/src/linux-headers-${KERNELVER}/scripts/sign-file

for m in vboxdrv vboxnetflt vboxnetadp vboxpci; do
    modpath=$(modinfo -F filename "$m" 2>/dev/null || echo "")
    if [ -n "$modpath" ]; then
        echo "Signing $m -> $modpath"
        ${SIGNFILE} sha256 /root/module-signing/MOK-vbox.priv /root/module-signing/MOK-vbox.der "$modpath"
    fi
done

## Rebuild module dependencies ##
depmod -a

1.8. Add VirtualBox User(s) to vboxusers Group

Run as root (replace $USER with your username if needed):

usermod -a -G vboxusers $USER

Logout/login (or reboot) to make group membership active.

1.9. Start VirtualBox

Use launcher from menu or simply run VirtualBox as normal user:

VirtualBox

1.10. (Optional) Install VirtualBox Extension Pack 7.2.6

cd ~/Downloads

wget https://download.virtualbox.org/virtualbox/7.2.6/Oracle_VirtualBox_Extension_Pack-7.2.6-172322.vbox-extpack
VBoxManage extpack install --replace Oracle_VirtualBox_Extension_Pack-7.2.6-172322.vbox-extpack

2. Install Oracle’s VirtualBox using .run installer (stable / test builds)

This section is useful if you want to test Oracle VirtualBox test builds or development snapshots.

Note: Start this with fully updated system and using latest kernel version. This guide works with UEFI Secure Boot disabled or enabled. If you keep Secure Boot enabled, follow this step-by-step module signing guide:

Debian Secure Boot: Howto sign VirtualBox kernel modules (DKMS + .run installer)

2.1. Change root user

You should perform package management and installation steps as root. Use:

su -
## OR ##
sudo -i

After switching to root, run the following commands without sudo:

2.2. Remove VirtualBox apt installations (optional)

apt remove 'virtualbox*' || true

2.3. Install dependencies

apt update
apt install build-essential dkms linux-headers-$(uname -r) make gcc

2.4. Download VirtualBox Installer(s)

cd ~/Downloads

## Download VirtualBox 7.2.6-172322 latest stable build ##
wget https://download.virtualbox.org/virtualbox/7.2.6/VirtualBox-7.2.6-172322-Linux_amd64.run

## Download VirtualBox 7.1.x-172119 test build ##
wget https://www.virtualbox.org/download/testcase/VirtualBox-7.1.x-172119-Linux_amd64.run

## Download VirtualBox 7.2.x-172125 test build ##
wget https://www.virtualbox.org/download/testcase/VirtualBox-7.2.x-172125-Linux_amd64.run

## Download VirtualBox development snapshot ##
wget https://www.virtualbox.org/download/testcase/VirtualBox-development-172124-Linux_amd64.run

Check current versions from VirtualBox Linux builds and VirtualBox test builds.

2.5. Make Installer File Executable

cd ~/Downloads

chmod +x VirtualBox-7.2.6-172322-Linux_amd64.run

## OR ##

chmod +x VirtualBox-7.1.x-172119-Linux_amd64.run

## OR ##

chmod +x VirtualBox-7.2.x-172125-Linux_amd64.run

## OR ##

chmod +x VirtualBox-development-172124-Linux_amd64.run

2.6. Install VirtualBox (stable or test build)

~/Downloads/VirtualBox-7.2.6-172322-Linux_amd64.run

## OR ##

~/Downloads/VirtualBox-7.1.x-172119-Linux_amd64.run

## OR ##

~/Downloads/VirtualBox-7.2.x-172125-Linux_amd64.run

## OR ##

~/Downloads/VirtualBox-development-172124-Linux_amd64.run

Rebuild kernel modules if needed:

Secure Boot disabled

/sbin/vboxconfig

Secure Boot enabled

If you have UEFI Secure Boot enabled with custom module signing keys (from Page 2):

## First, rebuild modules without signing ##
/sbin/vboxconfig

## Then manually sign the rebuilt modules ##
KERNELVER=$(uname -r)
SIGNFILE=/usr/src/linux-headers-${KERNELVER}/scripts/sign-file

for m in vboxdrv vboxnetflt vboxnetadp vboxpci; do
    modpath=$(modinfo -F filename "$m" 2>/dev/null || echo "")
    if [ -n "$modpath" ]; then
        echo "Signing $m -> $modpath"
        ${SIGNFILE} sha256 /root/module-signing/MOK-vbox.priv /root/module-signing/MOK-vbox.der "$modpath"
    fi
done

## Rebuild module dependencies ##
depmod -a

2.7. Add VirtualBox User(s) to vboxusers Group

Run as root (replace $USER with your username if needed):

usermod -a -G vboxusers $USER

2.8. Start VirtualBox

VirtualBox

3. Troubleshooting

3.1 UEFI Secure Boot

If you have Secure Boot enabled, VirtualBox kernel modules may not load unless you sign them or disable Secure Boot.

To keep Secure Boot enabled and use VirtualBox, follow the module signing guide:

Debian Secure Boot: Howto sign VirtualBox kernel modules (DKMS + .run installer)