OK.

If anyone wants to give it a go:

sftp tmo@bbmk.org
as password use our domain, what we're all about, all 5 lowercase letters of it

then cd sdk
get Maemo_SDK.tar.gz

It's 1908310604 bytes (1.8G).
md5sum gives 02269b29893a1e325416c698e5eecfe5

unpack it and you get:
Logs/
install.txt
Maemo SDK-flat.vmdk (10737418240 bytes)
Maemo SDK.vbox
Maemo SDK.vbox-prev
Maemo SDK.vmdk

I suppose the .vbox can be directly opened by Virtualbox. You may need to tweak the path to the virtual disk (.vmdk).

The install.txt documents what I've done to create the image.
user and its password is user.
for root the password is the same as for the tmo user on my server.
(or read install.txt if you don't like riddles).

The tmo user on bbmk.org can only do sftp and only on a folder. I think I've gotten that part pretty OK. If I spot misuse I drop the account on the spot.

Additional "flavours" of this will (some day) include CSSU and/or CSSU-thumb toolchain. QtSDK (1.1.1) is on the list as well, but don't wait awake for it.