{"id":41811,"date":"2020-02-16T20:45:57","date_gmt":"2020-02-16T17:45:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/ispolzovanie-qubesos-dlya-raboty-s-windows-7"},"modified":"2020-02-16T20:45:57","modified_gmt":"2020-02-16T17:45:57","slug":"ispolzovanie-qubesos-dlya-raboty-s-windows-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","title":{"rendered":"Using QubesOS for Working with Windows 7","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>There aren\u2019t many articles on Habr dedicated to the Qubes operating system, and those I\u2019ve seen barely describe practical experience. Below, I hope to rectify this by sharing my experience using Qubes as a means of protection against the Windows environment and, in the process, assess the number of Russian-speaking users of the system.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Using QubesOS for Working with Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/9625f1a9464dc610d1f3266571cf8929.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Why Qubes?<\/h2>\n<p><\/p>\n<p>The end of support for Windows 7 and the increasing anxiety of users led to the need to organize the operation of this OS, considering the following requirements:<\/p>\n<p><\/p>\n<ul>\n<li>ensure the use of a fully activated Windows 7 with the ability for the user to install updates and various applications (including via the Internet);<\/li>\n<li>implement complete or selective exclusion of network interactions on a conditional basis (offline modes and traffic filtering);<\/li>\n<li>provide the possibility of selective connection of removable media and devices.<\/li>\n<\/ul>\n<p><\/p>\n<p>Such a set of restrictions implies a clearly prepared user, as self-administration is allowed, and the limitations are related not to blocking potential actions but to preventing possible mistakes or destructive software impacts. That is, there are no internal threats in this model.<\/p>\n<p><\/p>\n<p>In our search for a solution, we quickly abandoned the idea of implementing restrictions using built-in or additional Windows tools, as it is quite challenging to effectively limit a user with administrative rights while allowing them to install applications.<\/p>\n<p><\/p>\n<p>The next solution option was isolation through virtualization. Well-known tools for desktop virtualization (such as VirtualBox) are poorly suited for security tasks, and the listed restrictions would require the user to constantly switch or configure the properties of the guest virtual machine (VM), which increases the risk of errors.<\/p>\n<p><\/p>\n<p>At the same time, we had experience using Qubes as a user desktop system, but there were concerns about the stability of the guest Windows. It was decided to check the current version of Qubes, as the imposed limitations fit very well within the paradigm of this system, especially the implementation of virtual machine templates and visual integration. Below, I will try to briefly discuss the ideas and tools of Qubes, using the example of solving the assigned task.<\/p>\n<p><\/p>\n<h2>Types of Xen Virtualization<\/h2>\n<p><\/p>\n<p>At the core of Qubes is the Xen hypervisor, which minimizes its functionalities related to managing CPU resources, memory, and virtual machines. All other device management is concentrated in dom0 based on the Linux kernel (Qubes uses a Fedora distribution for dom0).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Using QubesOS for Working with Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/d8bfeb6cc8daef0370c9d567486c0356.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Xen supports several types of virtualization (I will provide examples for Intel architecture, although Xen supports others as well):<\/p>\n<p><\/p>\n<ul>\n<li>paravirtualization (PV) \u2014 a virtualization mode that does not use hardware support, reminiscent of container virtualization, and can be used for systems with a modified kernel (this is how dom0 operates);<\/li>\n<li>full virtualization (HVM) \u2014 in this mode, hardware support is used for CPU resources, while all other hardware is emulated by QEMU. This is the most versatile method for running various OSes;<\/li>\n<li>hardware paravirtualization (PVH \u2014 ParaVirtualized Hardware) \u2014 a virtualization mode using hardware support where the guest system's kernel uses drivers adapted to the hypervisor's capabilities (for instance, shared memory), eliminating the need for QEMU emulation and enhancing input-output performance. Linux kernel version 4.11 and later can operate in this mode.<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Using QubesOS for Working with Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/ffafc6a75aa9248659848c4bf08956e1.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Starting from version Qubes 4.0, for security reasons, the use of paravirtualization mode is being phased out (also due to known vulnerabilities in the Intel architecture, which are partially mitigated by using full virtualization), with the PVH mode being used by default.<\/p>\n<p><\/p>\n<p>When using emulation (HVM mode), QEMU starts within an isolated VM called stubdomain, thereby reducing the risks of exploiting potential implementation errors (the QEMU project contains a lot of code, including for compatibility).<br \/>\nSuch a mode should be used for Windows in our case.<\/p>\n<p><\/p>\n<h2>Service virtual machines<\/h2>\n<p><\/p>\n<p>In the security architecture of Qubes, one of the key features of the hypervisor is passing PCI devices to the guest environment. Device exclusion allows for the isolation of the host part of the system from external attacks. Xen supports this for both PV and HVM modes; in the latter case, IOMMU (Intel VT-d) support is required \u2014 hardware memory management for virtualized devices.<\/p>\n<p><\/p>\n<p>This creates several system virtual machines:<\/p>\n<p><\/p>\n<ul>\n<li>sys-net, which is assigned network devices and serves as a bridge for other VMs, such as those implementing firewall functions or acting as a VPN client;<\/li>\n<li>sys-usb, which is assigned USB and other peripheral device controllers;<\/li>\n<li>sys-firewall, which does not use any devices but functions as a firewall for connected VMs.<\/li>\n<\/ul>\n<p><\/p>\n<p>Proxy services are used to work with USB devices, which provide the following:<\/p>\n<p><\/p>\n<ul>\n<li>for HID (human interface device) class devices, sending commands to dom0;<\/li>\n<li>for removable media, redirecting device volumes to other VMs (excluding dom0);<\/li>\n<li>redirecting USB devices directly (using USBIP and integration tools).<\/li>\n<\/ul>\n<p><\/p>\n<p>In such a configuration, a successful attack through the network stack or connected devices may compromise only the running service VM, not the entire system. After restarting the service VM, it will be loaded in its original state.<\/p>\n<p><\/p>\n<h2>VM integration tools<\/h2>\n<p><\/p>\n<p>There are several ways to interact with the desktop of a virtual machine \u2014 installing applications in the guest system or emulating video through virtualization tools. Various universal remote access tools (RDP, VNC, Spice, etc.) can serve as guest applications or those adapted to a specific hypervisor (such tools are typically referred to as guest utilities). A mixed option can also be applied where the hypervisor emulates input-output for the guest system while externally providing the ability to use a protocol that combines input-output, similar to Spice. In this case, remote access tools usually optimize the image since they are designed for network operation, which negatively affects image quality.<\/p>\n<p><\/p>\n<p>Qubes provides its own tools for VM integration. Primarily, this is the graphical subsystem \u2014 windows from various VMs are displayed on a single desktop with their own color framing. Overall, the integration tools are based on the capabilities of the hypervisor \u2014 shared memory (Xen grant table), notification mechanisms (Xen event channel), shared storage xenstore, and the vchan communication protocol. Using these, the basic components qrexec and qubes-rpc are implemented, along with application services \u2014 sound or USB redirection, file transfer, clipboard content sharing, executing commands, and launching applications. There is a possibility to set policies that limit the services available on the VM. Below is an example of the procedure for initializing interaction between two VMs.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Using QubesOS for Working with Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/eb0706697196168d2d50a90e25090497.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Thus, operation in the VM takes place without using the network, allowing for full utilization of standalone VMs to avoid information leakage. For example, this is how the separation of cryptographic operations (PGP\/SSH) is implemented, where private keys are used within isolated VMs and do not leave their boundaries.<\/p>\n<p><\/p>\n<h2>Templates, application, and disposable VMs<\/h2>\n<p><\/p>\n<p>All user work in Qubes is performed in virtual machines. The main host system is used to manage their operation and visualization. The OS is installed along with a basic set of virtual machines based on templates (TemplateVM). Such a template is a Linux VM based on the Fedora or Debian distribution, equipped with integration tools, and dedicated system and user partitions. Software installation and updates are performed using the standard package manager (dnf or apt) from configured repositories with mandatory digital signature verification (GnuPG). The purpose of these VMs is to ensure trust in application VMs that run on their basis.<\/p>\n<p><\/p>\n<p>An application VM (AppVM) uses a snapshot of the system partition of the corresponding VM template upon startup, and after it ends, it deletes this snapshot without saving changes. User data is stored in a unique user partition for each application VM, which is mounted in the home directory.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Using QubesOS for Working with Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/604c4f94fdb9644b589f87104364dc20.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>From a security perspective, using disposable VMs (disposibleVM) can be beneficial. Such a VM is created based on a template at the moment of startup and is launched for one purpose \u2014 to run a single application, terminating after its closure. Disposable VMs can be used to open suspicious files whose contents may exploit vulnerabilities in specific applications. The capability to launch a disposable VM is integrated into the file manager (Nautilus) and the email client (Thunderbird). <\/p>\n<p><\/p>\n<p>A Windows VM can also be used to create a template and a disposable VM; for this purpose, the user profile is moved to a separate partition. In our case, this template will be used by the user for administration tasks and application installation. Several application VMs will be created based on the template \u2014 with limited network access (built-in sys-firewall capabilities) and with no network access at all (no virtual network device created). In these VMs, all changes and applications installed in the template will be available, and even in the case of implanting malware, they will have no network access to compromise.<\/p>\n<p><\/p>\n<h2>The Fight for Windows<\/h2>\n<p><\/p>\n<p>The capabilities described above form the basis of Qubes and function quite stably; difficulties arise with Windows. To integrate Windows, it is necessary to use the Qubes Windows Tools (QWT) suite, which includes drivers for working with Xen, the qvideo driver, and a set of tools for information exchange (file transfer, clipboard). The installation and configuration process is thoroughly documented on the project site, so we will share our experience of implementing it.<\/p>\n<p><\/p>\n<p>The main challenge lies essentially in the lack of support for the developed toolset. Key developers (QWT) seem to be unavailable, and the integration project with Windows is pending a lead developer. Therefore, it was initially necessary to assess functionality and gain insight into the possibility of supporting it independently if needed. The most challenging aspect for development and debugging is the graphics driver, which emulates a video adapter and display for rendering images in shared memory, allowing the entire desktop or a specific application window to be displayed in the host system's window. During the analysis of the driver's performance, we adapted the code for building in a Linux environment and refined the debugging scheme between two guest Windows systems. During the cross-build phase, we implemented several simplifying changes, mainly concerning the 'silent' installation of utilities, and resolved annoying performance degradation during prolonged operation in the VM. We documented our results separately. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tabit-pro\/qwt-crossbuild\">the repository<\/a><\/noindex>, thus briefly <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/QubesOS\/qubes-issues\/issues\/5065\">inspiring<\/a><\/noindex> the lead developer of Qubes.<\/p>\n<p><\/p>\n<p>The most critical phase regarding the stability of the guest system is launching Windows, where you might see the familiar blue screen (or even not see it). For most identified errors, various workarounds were found \u2014 including abandoning Xen drivers for block devices, disabling VM memory balancing, fixing network settings, and minimizing the number of cores. Our build of guest tools installs and works on fully updated Windows 7 and Windows 10 (except for qvideo).<\/p>\n<p><\/p>\n<p>When transitioning from a physical environment to a virtual one, there is an issue with activating Windows when using pre-installed OEM versions. Such systems rely on activation based on licenses stored in the device's UEFI. To ensure proper activation processing, it is necessary to fully pass one of the host system's ACPI sections (the SLIC table) to the guest system and make minor adjustments to others by specifying the manufacturer. Xen allows configuring the content of additional ACPI tables, but not modifying the main ones. A patch from a similar project, OpenXT, which was adapted for Qubes, helped solve this issue. The fixes proved useful not only to us and were incorporated into the main Qubes repository and the Libvirt library.<\/p>\n<p><\/p>\n<p>The obvious drawbacks of Windows integration tools include the lack of audio support, USB devices, and the complexity of working with media due to the absence of GPU hardware support. However, these issues do not hinder the use of VMs for handling office documents and do not prevent the launching of specific corporate applications.<\/p>\n<p><\/p>\n<p>The requirement to switch to offline mode or limited network operation after creating the Windows VM template was met by creating the corresponding configurations of application VMs, and the ability to selectively connect removable drives was also addressed through the standard OS tools \u2014 when connected, they are available in the system VM sys-usb, from which they can be 'passed through' to the required VM. The user's desktop looks approximately like this.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Using QubesOS for Working with Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/ed003174a07a412071095cda51f7c2cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>The final version of the system has been positively accepted by users (as much as such a complex solution allows), and the built-in system tools have enabled expanding its use to the mobile workstation with access via VPN.<\/p>\n<p><\/p>\n<h2>In conclusion<\/h2>\n<p><\/p>\n<p>Overall, virtualization reduces the risks associated with using unsupported Windows systems \u2014 it does not force compatibility with new hardware, allows for excluding or controlling access to the system over the network or through connected devices, and enables creating an environment for one-time execution.<\/p>\n<p><\/p>\n<p>Qubes OS, based on the idea of isolation through virtualization, helps utilize these and other mechanisms to ensure security. From the outside, many see Qubes primarily as a pursuit of anonymity, but it is a useful system for engineers often juggling projects, infrastructures, and access secrets, as well as for security researchers. The separation of applications, data, and formalizing their interactions are initial steps in threat analysis and system protection design. This separation helps structure information and reduces the likelihood of errors due to human factors\u2014haste, fatigue, etc.<\/p>\n<p><\/p>\n<p>Currently, the main focus of development is on expanding the functionality of Linux environments. A release of version 4.1 is being prepared, which will be based on Fedora 31 and include up-to-date versions of key components Xen and Libvirt. It's worth noting that Qubes is created by professionals in the field of information security, who promptly release updates in case of new threats or bugs.<\/p>\n<p><\/p>\n<h2>Afterword<\/h2>\n<p><\/p>\n<p>One of our experimental features being developed allows the creation of VMs with guest access to GPUs based on Intel GVT-g technology, enabling the utilization of the graphics card capabilities and significantly expanding the application scope of the system. At the time of writing this article, this functionality works for testing builds of Qubes 4.1 and is available on <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tabit-pro\/tabit-qubes-repo\">github<\/a><\/noindex>.<\/p>\n<p>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/488234\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u041f\u043e\u0434 \u043a\u0430\u0442\u043e\u043c \u043d\u0430\u0434\u0435\u044e\u0441\u044c \u044d\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Qubes \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (\u043e\u0442) \u0441\u0440\u0435\u0434\u044b Windows \u0438, \u043f\u043e\u043f\u0443\u0442\u043d\u043e, \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0443\u0441\u0441\u043a\u043e\u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u0447\u0435\u043c\u0443 Qubes? \u0418\u0441\u0442\u043e\u0440\u0438\u044f \u0441 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Windows 7 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41812,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 QubesOS \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Windows 7 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-16T17:45:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-16T17:45:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Using QubesOS for working with Windows 7 | ProHoster","description":"There are not many articles dedicated to Qubes OS on Habr, and the ones I have seen provide little description of practical experience.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 QubesOS \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Windows 7 | ProHoster","og:description":"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/en\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-16T17:45:57+00:00","article:modified_time":"2020-02-16T17:45:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:10:22","updated":"2022-10-05 20:31:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/41811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=41811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/41811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/41812"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=41811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=41811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=41811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}