{"id":41811,"date":"2020-02-16T20:45:57","date_gmt":"2020-02-16T17:45:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/ispolzovanie-qubesos-dlya-raboty-s-windows-7"},"modified":"2020-02-16T20:45:57","modified_gmt":"2020-02-16T17:45:57","slug":"ispolzovanie-qubesos-dlya-raboty-s-windows-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","title":{"rendered":"QubesOS izmanto\u0161ana darbam ar Windows 7","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Habr\u0101 nav daudz rakstu, kas velt\u012bti oper\u0113t\u0101jsist\u0113mai Qubes, un tie, kurus esmu redz\u0113jis, maz apraksta pieredzi. Zem\u0101k ceru to labot, izmantojot Qubes k\u0101 aizsardz\u012bbas l\u012bdzekli pret Windows vidi un vienlaikus nov\u0113rt\u0113jot krievvalod\u012bgo lietot\u0101ju skaitu sist\u0113m\u0101.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"QubesOS izmanto\u0161ana darbam ar Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/9625f1a9464dc610d1f3266571cf8929.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>K\u0101p\u0113c Qubes?<\/h2>\n<p><\/p>\n<p>St\u0101sts par Windows 7 tehnisk\u0101s atbalsta beig\u0101m un lietot\u0101ju pieaugo\u0161ais uztraukums noveda pie nepiecie\u0161am\u012bbas organiz\u0113t \u0161\u012bs oper\u0113t\u0101jsist\u0113mas darb\u012bbu, iev\u0113rojot \u0161\u0101dus pras\u012bbas:<\/p>\n<p><\/p>\n<ul>\n<li>nodro\u0161in\u0101t piln\u012bb\u0101 aktiviz\u0113tu Windows 7 lieto\u0161anu ar iesp\u0113ju lietot\u0101jam instal\u0113t atjaunin\u0101jumus un da\u017e\u0101das lietojumprogrammas (taj\u0101 skait\u0101 caur internetu);<\/li>\n<li>\u012bstenot piln\u012bgu vai selekt\u012bvu t\u012bkla mijiedarb\u012bbu izsl\u0113g\u0161anu p\u0113c noteikuma (autonom\u0101 darba re\u017e\u012bms un trafika filtr\u0113\u0161ana);<\/li>\n<li>nodro\u0161in\u0101t iesp\u0113ju selekt\u012bvi piesl\u0113gt \u0101r\u0113jus datu nes\u0113jus un ier\u012bces.<\/li>\n<\/ul>\n<p><\/p>\n<p>\u0160\u0101ds ierobe\u017eojumu kopums pieprasa \u012bpa\u0161i sagatavotu lietot\u0101ju, jo tiek at\u013cauta patst\u0101v\u012bga administr\u0113\u0161ana, un ierobe\u017eojumi nav saist\u012bti ar vi\u0146a potenci\u0101lo darb\u012bbu blo\u0137\u0113\u0161anu, bet gan ar iesp\u0113ju samazin\u0101t iesp\u0113jam\u0101s k\u013c\u016bdas vai programmat\u016bras destrukt\u012bvo ietekmi. T.i., iek\u0161\u0113j\u0101 iebruc\u0113ja model\u012b nav.<\/p>\n<p><\/p>\n<p>Mekl\u0113jot risin\u0101jumu, m\u0113s \u0101tri atteic\u0101mies no idejas \u012bstenot ierobe\u017eojumus, izmantojot ieb\u016bv\u0113tas vai papildu Windows l\u012bdzek\u013cus, jo ir diezgan sare\u017e\u0123\u012bti efekt\u012bvi ierobe\u017eot administratora ties\u012bbas lietot\u0101jam, atst\u0101jot vi\u0146am iesp\u0113ju instal\u0113t lietojumprogrammas.<\/p>\n<p><\/p>\n<p>N\u0101kamais risin\u0101juma variants bija izol\u0101cija, izmantojot virtualiz\u0101ciju. Pla\u0161i paz\u012bstamie r\u012bki darbvirsmas virtualiz\u0101cijai (piem\u0113ram, t\u0101di k\u0101 virtualbox) slikti piem\u0113roti dro\u0161\u012bbas probl\u0113mu risin\u0101\u0161anai, un nor\u0101d\u012btie ierobe\u017eojumi lietot\u0101jam b\u016bs j\u0101veic nep\u0101rtraukti p\u0101rsl\u0113dzot vai iestatot viesdatora virtu\u0101l\u0101s ma\u0161\u012bnas (turpm\u0101k - VM) \u012bpa\u0161\u012bbas, kas palielina k\u013c\u016bdu riskus.<\/p>\n<p><\/p>\n<p>Vienlaikus mums bija pieredze Qubes izmanto\u0161an\u0101 k\u0101 lietot\u0101ja galddatoru sist\u0113m\u0101, ta\u010du bija \u0161aubas par st\u0101vokli ar vies\u0113jo Windows. Tika nolemts p\u0101rbaud\u012bt aktu\u0101lo Qubes versiju, jo noteikt\u0101s ierobe\u017eojumi \u013coti labi iederas \u0161\u012bs sist\u0113mas paradigmas ietvaros, \u012bpa\u0161i virtu\u0101l\u0101s ma\u0161\u012bnas \u0161ablona \u012bsteno\u0161an\u0101 un vizu\u0101laj\u0101 integr\u0101cij\u0101. Turpm\u0101k m\u0113\u0123in\u0101\u0161u, cik iesp\u0113jams, \u012bsi past\u0101st\u012bt par idej\u0101m un instrumentiem, ko pied\u0101v\u0101 Qubes, izmantojot izvirz\u012bt\u0101s uzdevuma risin\u0101\u0161anas piem\u0113rus.<\/p>\n<p><\/p>\n<h2>Xen virtualiz\u0101cijas tipi<\/h2>\n<p><\/p>\n<p>Qubes pamats ir hypervizors Xen, kas minimiz\u0113 resursu p\u0101rvald\u012bbas funkcijas procesoram, atmi\u0146ai un virtu\u0101laj\u0101m ma\u0161\u012bn\u0101m. Visi p\u0101r\u0113jie darbi ar ier\u012bc\u0113m ir koncentr\u0113ti dom0, kas balst\u012bts uz Linux kodola (Qubes dom0 izmanto Fedora izplat\u012bjumu).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"QubesOS izmanto\u0161ana darbam ar Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/d8bfeb6cc8daef0370c9d567486c0356.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Xen atbalsta vair\u0101kus virtualiz\u0101cijas tipus (es snieg\u0161u piem\u0113rus Intel arhitekt\u016brai, lai gan Xen atbalsta ar\u012b citus):<\/p>\n<p><\/p>\n<ul>\n<li>p\u0101rvirtu\u0101liz\u0101cija (PV) \u2014 virtualiz\u0101cijas re\u017e\u012bms bez aparat\u016bras atbalsta, kas atg\u0101dina konteinera virtualiz\u0101ciju, var tikt izmantots sist\u0113m\u0101m ar piel\u0101gotu kodolu (\u0161o re\u017e\u012bmu izmanto dom0);<\/li>\n<li>pilna virtualiz\u0101cija (HVM) \u2014 \u0161aj\u0101 re\u017e\u012bm\u0101 aparat\u016bras atbalsts tiek izmantots procesora resursiem, bet visa p\u0101r\u0113j\u0101 aparat\u016bra tiek emul\u0113ta ar QEMU. Tas ir visunivers\u0101l\u0101k\u0101 metode da\u017e\u0101du oper\u0113t\u0101jsist\u0113mu palai\u0161anai;<\/li>\n<li>p\u0101rvirtu\u0101liz\u0101cija aparat\u016brai (PVH \u2014 ParaVirtualized Hardware) \u2014 virtualiz\u0101cijas re\u017e\u012bms, kas izmanto aparat\u016bras atbalstu, kad vies\u0113jo sist\u0113mu kodols izmanto draiverus, kas piel\u0101goti hypervizora iesp\u0113j\u0101m (piem\u0113ram, kop\u012bgotai atmi\u0146ai), no\u0146emot nepiecie\u0161am\u012bbu p\u0113c QEMU emul\u0101cijas un paaugstinot ievades-izvades veiktsp\u0113ju. Linux kodols s\u0101kot ar 4.11 var darboties \u0161\u0101d\u0101 re\u017e\u012bm\u0101.<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"QubesOS izmanto\u0161ana darbam ar Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/ffafc6a75aa9248659848c4bf08956e1.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>S\u0101kot ar Qubes versiju 4.0, dro\u0161\u012bbas apsv\u0113rumu d\u0113\u013c tiek atteik\u0161an\u0101s no p\u0101rvirtu\u0101liz\u0101cijas re\u017e\u012bma (tostarp saist\u012bb\u0101 ar zin\u0101maj\u0101m Intel arhitekt\u016bras ievainojam\u012bb\u0101m, kas da\u013c\u0113ji tiek nov\u0113rstas, izmantojot pilnu virtualiz\u0101ciju), p\u0113c noklus\u0113juma tiek izmantots PVH re\u017e\u012bms.<\/p>\n<p><\/p>\n<p>Izmantojot emul\u0101ciju (HVM re\u017e\u012bms), QEMU palai\u0161ana notiek izol\u0113t\u0101 VM, ko sauc par stubdomain, t\u0101d\u0113j\u0101di samazinot potenci\u0101lo k\u013c\u016bdu izmanto\u0161anas riskus (QEMU projekts satur daudz kodu, tostarp sader\u012bbas nol\u016bkiem).<br \/>\n\u0160\u0101du re\u017e\u012bmu m\u016bsu gad\u012bjum\u0101 vajadz\u0113tu izmantot Windows.<\/p>\n<p><\/p>\n<h2>Kalpojo\u0161as virtu\u0101l\u0101s ma\u0161\u012bnas<\/h2>\n<p><\/p>\n<p>Qubes dro\u0161\u012bbas arhitekt\u016br\u0101 vienas no hipervizora galvenaj\u0101m funkcij\u0101m ir PCI ier\u012b\u010du nodo\u0161ana vies\u0113jo vid\u0113. \u0112r\u012b\u010du izsl\u0113g\u0161ana \u013cauj izol\u0113t vies\u0113jo sist\u0113mas da\u013cu no \u0101r\u0113jiem uzbrukumiem. Xen to atbalsta gan PV, gan HVM re\u017e\u012bmos; otraj\u0101 gad\u012bjum\u0101 tam nepiecie\u0161ama IOMMU (Intel VT-d) atbalsts \u2014 aparat\u016bras atmi\u0146as vad\u012bba virtualiz\u0113jam\u0101m ier\u012bc\u0113m.<\/p>\n<p><\/p>\n<p>T\u0101d\u0113j\u0101di tiek izveidotas vair\u0101kas sist\u0113mu virtu\u0101l\u0101s ma\u0161\u012bnas:<\/p>\n<p><\/p>\n<ul>\n<li>sys-net, kurai tiek nodoti t\u012bkla ier\u012bces un kas tiek izmantota k\u0101 tilts cit\u0101m VM, piem\u0113ram, \u012bstenojot ugunsm\u016bra funkcijas vai VPN t\u012bkla klientu;<\/li>\n<li>sys-usb, kurai tiek nodoti USB un citi perif\u0113rijas kontrolieri;<\/li>\n<li>sys-firewall, kas neizmanto ier\u012bces, bet darbojas k\u0101 ugunsm\u016bris pievienotaj\u0101m VM.<\/li>\n<\/ul>\n<p><\/p>\n<p>Lai str\u0101d\u0101tu ar USB ier\u012bc\u0113m, tiek izmantoti proxy pakalpojumi, kas nodro\u0161ina, tostarp:<\/p>\n<p><\/p>\n<ul>\n<li>HID (human interface device) ier\u012b\u010du klasei komandu nodo\u0161anu dom0;<\/li>\n<li>no\u0146emamajiem datu nes\u0113jiem nodro\u0161inot ier\u012b\u010du apjomu p\u0101radres\u0101ciju cit\u0101m VM (iz\u0146emot dom0);<\/li>\n<li>p\u0101radres\u0113jot tie\u0161i USB ier\u012bci (izmanto USBIP un integr\u0101cijas r\u012bkus).<\/li>\n<\/ul>\n<p><\/p>\n<p>\u0160\u0101d\u0101 konfigur\u0101cij\u0101 veiksm\u012bgs uzbrukums caur t\u012bkla steku vai pievienojam\u0101m ier\u012bc\u0113m var novest pie kompromit\u0101cijas tikai uzs\u0101ktaj\u0101 kalpojo\u0161aj\u0101 VM, nevis visai sist\u0113mai kopum\u0101. Un p\u0113c kalpojo\u0161\u0101s VM restart\u0113\u0161anas t\u0101 tiks iel\u0101d\u0113ta s\u0101kotn\u0113j\u0101 st\u0101vokl\u012b.<\/p>\n<p><\/p>\n<h2>VM integr\u0101cijas r\u012bki<\/h2>\n<p><\/p>\n<p>Ir vair\u0101ki veidi, k\u0101 mijiedarboties ar virtu\u0101l\u0101s ma\u0161\u012bnas darbvirsmu \u2014 instal\u0113jot lietotnes viesu sist\u0113m\u0101 vai emul\u0113jot video, izmantojot virtualiz\u0101cijas r\u012bkus. K\u0101 viesu lietotnes var darboties da\u017e\u0101di univers\u0101li att\u0101lin\u0101t\u0101 piek\u013cuves r\u012bki (RDP, VNC, Spice u.c.) vai r\u012bki, kas piel\u0101goti konkr\u0113tam hipervizoram (\u0161\u0101da veida instrumentus parasti d\u0113v\u0113 par viesu util\u012bt\u0113m). Var izmantot ar\u012b jauktu variantu, kad hipervizors emul\u0113 ievades-izvades oper\u0101cijas viesu sist\u0113m\u0101, bet \u0101rpus t\u0101 nodro\u0161ina iesp\u0113ju izmantot protokolu, kas apvieno ievades-izvades, piem\u0113ram, k\u0101 tas ir ar Spice. \u0160aj\u0101 proces\u0101 att\u0101lin\u0101t\u0101s piek\u013cuves r\u012bki parasti optimiz\u0113 att\u0113lu, jo pie\u0146em, ka darbs notiek caur t\u012bklu, kas negat\u012bvi ietekm\u0113 att\u0113la kvalit\u0101ti.<\/p>\n<p><\/p>\n<p>Qubes nodro\u0161ina savus l\u012bdzek\u013cus VM integr\u0101cijai. Pirmk\u0101rt, t\u0101 ir grafisk\u0101 apak\u0161sist\u0113ma \u2014 logi no da\u017e\u0101d\u0101m VM tiek r\u0101d\u012bti vienot\u0101 darbvirsm\u0101 ar savu kr\u0101su apmali. Kopum\u0101 integr\u0101cijas r\u012bki balst\u0101s uz hipervizora iesp\u0113j\u0101m \u2014 dal\u012bto atmi\u0146u (Xen grant table), pazi\u0146o\u0161anas l\u012bdzek\u013ciem (Xen event channel), dal\u012bto glab\u0101tuvi xenstore un komunik\u0101cijas protokolu vchan. To pal\u012bdz\u012bbu izmanto, lai \u012bstenotu pamatelementus qrexec un qubes-rpc, k\u0101 ar\u012b lietojumprogrammu pakalpojumus \u2014 ska\u0146as vai USB novirz\u012b\u0161anu, failu vai starpliktuves satura p\u0101rs\u016bt\u012b\u0161anu, komandu izpildi un lietojumprogrammu palai\u0161anu. Ir iesp\u0113ja izveidot politiku, kas ierobe\u017eo pieejamos pakalpojumus VM. Zem\u0101k redzams divu VM mijiedarb\u012bbas inicializ\u0101cijas piem\u0113rs.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"QubesOS izmanto\u0161ana darbam ar Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/eb0706697196168d2d50a90e25090497.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>T\u0101d\u0113j\u0101di darbs VM notiek bez t\u012bkla izmanto\u0161anas, kas \u013cauj pilnv\u0113rt\u012bgi izmantot autonomas VM, lai izvair\u012btos no inform\u0101cijas nopl\u016bdes. Piem\u0113ram, \u0161\u0101d\u0101 veid\u0101 tiek \u012bstenota kriptogr\u0101fisko oper\u0101ciju (PGP\/SSH) dal\u012b\u0161ana, kad slepen\u0101s atsl\u0113gas tiek izmantotas izol\u0113t\u0101s VM un nep\u0101rk\u0101pj to robe\u017eas.<\/p>\n<p><\/p>\n<h2>Veidnes, lietojumprogrammas un vienreiz\u0113j\u0101s VM<\/h2>\n<p><\/p>\n<p>Viss lietot\u0101ja darbs Qubes tiek veikts virtualiz\u0113taj\u0101s ma\u0161\u012bn\u0101s. Galven\u0101 hosta sist\u0113ma tiek izmantota, lai p\u0101rvald\u012btu to darb\u012bbu un vizualiz\u0101ciju. Oper\u0113t\u0101jsist\u0113ma tiek uzst\u0101d\u012bta kop\u0101 ar pamatpakalpojumu komplektu virtualiz\u0113taj\u0101m ma\u0161\u012bn\u0101m, kuras veidotas uz veid\u0146u pamata (TemplateVM). \u0160\u012b veidne ir Linux VM, kas balst\u012bta uz Fedora vai Debian izplat\u012bjumu, ar uzst\u0101d\u012bt\u0101m un konfigur\u0113t\u0101m integr\u0101cijas l\u012bdzek\u013ciem, k\u0101 ar\u012b atsevi\u0161\u0137\u0101m sist\u0113mas un lietot\u0101ja apgabaliem. Programmat\u016bras uzst\u0101d\u012b\u0161ana un atjaunin\u0101\u0161ana notiek ar standarta pakot\u0146u p\u0101rvaldnieku (dnf vai apt) no konfigur\u0113tajiem repozitorijiem, oblig\u0101ti p\u0101rbaudot digit\u0101lo parakstu (GnuPG). \u0160o VM m\u0113r\u0137is ir nodro\u0161in\u0101t uztic\u012bbu uz lietojumprogramm\u0101m, kas tiek palaistas uz to pamata.<\/p>\n<p><\/p>\n<p>Lietojumprogrammu VM (AppVM) palai\u0161anas br\u012bd\u012b izmanto attiec\u012bg\u0101 veidne VM sist\u0113mas apgabala att\u0113lu, un p\u0113c tam, kad tas tiek nosl\u0113gts, tiek dz\u0113sts \u0161is att\u0113ls bez izmai\u0146u saglab\u0101\u0161anas. Nepiecie\u0161amie lietot\u0101ja dati tiek glab\u0101ti unik\u0101l\u0101 katras lietojumprogrammu VM lietot\u0101ja apgabala, kas tiek pievienots m\u0101jas katalogam.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"QubesOS izmanto\u0161ana darbam ar Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/604c4f94fdb9644b589f87104364dc20.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Dro\u0161\u012bbas zi\u0146\u0101 noder\u012bga var b\u016bt vienreiz\u0113j\u0101s VM (disposable VM) izmanto\u0161ana. \u0160\u0101da VM tiek izveidota par pamatu veidnei palai\u0161anas br\u012bd\u012b un tiek palaista ar vienu m\u0113r\u0137i \u2014 izpild\u012bt vienu lietojumprogrammu, beidzot darbu t\u0101s aizv\u0113r\u0161anai. Vienreiz\u0113j\u0101s VM var tikt izmantotas, lai atv\u0113rtu aizdom\u012bgus failus, kuru saturs var novest pie konkr\u0113tu lietojumprogrammu ievainojam\u012bbu izmanto\u0161anas. Iesp\u0113ja palaist vienreiz\u0113ju VM ir integr\u0113ta failu p\u0101rl\u016bk\u0101 (Nautilus) un e-pasta klient\u0101 (Thunderbird). <\/p>\n<p><\/p>\n<p>Windows VM var tikt izmantota ar\u012b, lai izveidotu veidni un vienreiz\u0113ju VM, t\u0101d\u0113\u013c lietot\u0101ja profils tiek p\u0101rvietots atsevi\u0161\u0137\u0101 apgabal\u0101. M\u016bsu variant\u0101 \u0161\u0101da veidne tiks izmantota lietot\u0101ja administr\u0113\u0161anas uzdevumiem un lietojumprogrammu uzst\u0101d\u012b\u0161anai. Uz \u0161\u012bs veidnes tiks izveidotas vair\u0101kas lietojumprogrammu VM \u2014 ar ierobe\u017eotu piek\u013cuvi t\u012bklam (standarta sys-firewall iesp\u0113jas) un bez piek\u013cuves t\u012bklam visp\u0101r (netiks izveidots virtu\u0101ls t\u012bkla ier\u012bce). \u0160aj\u0101s VM b\u016bs pieejami visi uzlabojumi un lietojumprogrammas, kas tiek uzst\u0101d\u012btas veidn\u0113, un pat gad\u012bjum\u0101, ja tiek ieviestas programmat\u016bras a\u0123enti, t\u0101m neb\u016bs pieejas t\u012bklam kompromisei.<\/p>\n<p><\/p>\n<h2>C\u012b\u0146a par Windows<\/h2>\n<p><\/p>\n<p>Iepriek\u0161 min\u0113t\u0101s iesp\u0113jas ir Qubes pamats un darbojas diezgan stabilit\u0101ti, bet sare\u017e\u0123\u012bjumi s\u0101kas ar Windows. Lai integr\u0113tu Windows, ir nepiecie\u0161ams izmantot Qubes Windows Tools (QWT) viesu r\u012bku kopumu, kas ietver draiverus darbam ar Xen, qvideo draiveri un util\u012btu komplektu inform\u0101cijas apmai\u0146ai (failu p\u0101rs\u016bt\u012b\u0161ana, starpliktuve). Instal\u0101cijas un iestat\u012b\u0161anas process ir s\u012bk\u0101k dokument\u0113ts projekta m\u0101jaslap\u0101, t\u0101d\u0113\u013c dal\u012bsimies m\u016bsu pieredz\u0113.<\/p>\n<p><\/p>\n<p>Galven\u0101 gr\u016bt\u012bba ir faktiski atbalsta tr\u016bkums attiec\u012bgajam izstr\u0101des r\u012bkam. Galvenie izstr\u0101d\u0101t\u0101ji (QWT), \u0161\u0137iet, nav pieejami, un integr\u0101cijas projekts ar Windows gaida galveno izstr\u0101d\u0101t\u0101ju. T\u0101d\u0113\u013c vispirms bija j\u0101nov\u0113rt\u0113 darba sp\u0113ja un j\u0101saprot iesp\u0113jas to atbalst\u012bt patst\u0101v\u012bgi, ja nepiecie\u0161ams. Visgr\u016bt\u0101kais izstr\u0101des un atk\u013c\u016bdo\u0161anas zi\u0146\u0101 ir grafiskais draiveris, kas emul\u0113 videoadapteri un displeju, lai veidotu att\u0113lu kop\u012bgaj\u0101 atmi\u0146\u0101, \u013caujot att\u0113lot visu darbvirsmu vai tie\u0161i lietojumprogrammas logu vies\u0123imenes sist\u0113m\u0101. Analiz\u0113jot draivera darbu, m\u0113s piel\u0101goj\u0101m kodu b\u016bvniec\u012bbai Linux vid\u0113 un izstr\u0101d\u0101j\u0101m atk\u013c\u016bdo\u0161anas sh\u0113mu starp div\u0101m Windows viesu sist\u0113m\u0101m. Krosb\u016bves posm\u0101 veic\u0101m vair\u0101kus m\u016bsu atvieglojo\u0161us uzlabojumus galvenok\u0101rt attiec\u012bb\u0101 uz \"kluso\" util\u012btu uzst\u0101d\u012b\u0161anu, k\u0101 ar\u012b nov\u0113r\u0161am trauc\u0113jo\u0161u veiktsp\u0113jas pasliktin\u0101\u0161anos ilgsto\u0161\u0101 darb\u012bb\u0101 VM. M\u016bsu darba rezult\u0101ti ir noform\u0113ti atsevi\u0161\u0137i. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tabit-pro\/qwt-crossbuild\">repozitorij\u0101<\/a><\/noindex>, t\u0101d\u0113j\u0101di \u012bslaic\u012bgi <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/QubesOS\/qubes-issues\/issues\/5065\">iedvesmojot<\/a><\/noindex> galveno Qubes izstr\u0101d\u0101t\u0101ju.<\/p>\n<p><\/p>\n<p>Viskritisk\u0101kais posms viesu sist\u0113mas stabilit\u0101tes zi\u0146\u0101 ir Windows palai\u0161ana; \u0161eit var redz\u0113t paz\u012bstamo zilo ekr\u0101nu (vai pat neredz\u0113t to). Liel\u0101kajai da\u013cai atkl\u0101to k\u013c\u016bdu tika atrasti da\u017e\u0101di apiet\u0161anas varianti \u2014 atteik\u0161an\u0101s no Xen draiveriem blo\u0137\u0113t\u0101m ier\u012bc\u0113m, atsl\u0113g\u0161ana no VM atmi\u0146as l\u012bdzsvaro\u0161anas, t\u012bkla iestat\u012bjumu fiks\u0101cija un kodolu skaita minimiz\u0101cija. M\u016bsu viesu l\u012bdzek\u013cu komplekts tiek uzst\u0101d\u012bts un darbojas piln\u012bb\u0101 atjaunot\u0101 Windows 7 un Windows 10 (iz\u0146emot qvideo).<\/p>\n<p><\/p>\n<p>P\u0101rejot no re\u0101las vides uz virtu\u0101lo, rodas probl\u0113ma ar Windows aktiv\u0101ciju, ja tiek izmantotas iepriek\u0161 instal\u0113tas OEM versijas. \u0160\u0101das sist\u0113mas izmanto aktiv\u0101ciju, kas balst\u012bta uz licenc\u0113m, kas ierakst\u012btas ier\u012bces UEFI. Lai aktiv\u0101cija darbotos pareizi, nepiecie\u0161ams p\u0101rs\u016bt\u012bt viesosist\u0113m\u0101 vienu no ACPI sada\u013c\u0101m no hosta sist\u0113mas, piln\u012bgi (SLIC table) un nedaudz main\u012bt citas, nor\u0101dot ra\u017eot\u0101ju. Xen \u013cauj konfigur\u0113t papildu ACPI tabulu saturu, bet ne bez galveno modific\u0113\u0161anas. Ar risin\u0101jumu pal\u012bdz\u0113ja pl\u0101ksteris no l\u012bdz\u012bga projekta OpenXT, kas tika piel\u0101gots Qubes. Labojumi izr\u0101d\u012bj\u0101s noder\u012bgi ne tikai mums un tika nodoti galvenajam Qubes repozitorijam un Libvirt bibliot\u0113kai.<\/p>\n<p><\/p>\n<p>Ac\u012bmredzamajiem tr\u016bkumiem Windows integr\u0101cijas l\u012bdzek\u013cos ir j\u0101min ska\u0146as, USB ier\u012b\u010du atbalsta tr\u016bkums un gr\u016bt\u012bbas ar multividi, jo nav aparat\u016bras GPU atbalsta. Tom\u0113r min\u0113t\u0101s probl\u0113mas netrauc\u0113 VM izmanto\u0161anu biroja dokumentu apstr\u0101d\u0113 un neapgr\u016btina specifisku korporat\u012bvo lietojumprogrammu palai\u0161anu.<\/p>\n<p><\/p>\n<p>Pras\u012bba p\u0101riet uz darbu bez t\u012bkla vai ar ierobe\u017eotu t\u012bklu p\u0113c Windows VM veidnes izveides tika \u012bstenota, izveidojot atbilsto\u0161as konfigur\u0101cijas lietojumprogrammu VM, un iesp\u0113ja selekt\u012bvi pievienot no\u0146emamus nes\u0113jus tika atrisin\u0101ta, izmantojot oper\u0113t\u0101jsist\u0113mas standarta l\u012bdzek\u013cus \u2014 pievienojot tos, tie ir pieejami sist\u0113mas VM sys-usb, no kurienes var tikt \"p\u0101rs\u016bt\u012bti\" uz nepiecie\u0161amo VM. Lietot\u0101ja darbvirsma izskat\u0101s aptuveni \u0161\u0101di.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"QubesOS izmanto\u0161ana darbam ar Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/ed003174a07a412071095cda51f7c2cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Sist\u0113mas gal\u012bg\u0101 versija tika pozit\u012bvi (cik komplekss risin\u0101jums to at\u013c\u0101va) pie\u0146emta lietot\u0101ju vid\u016b, un sist\u0113mas ieb\u016bv\u0113tie l\u012bdzek\u013ci \u013c\u0101va papla\u0161in\u0101t lieto\u0161anu l\u012bdz mobilajai darbam vietai ar piek\u013cuvi caur VPN.<\/p>\n<p><\/p>\n<h2>Nosl\u0113gum\u0101<\/h2>\n<p><\/p>\n<p>Virtualiz\u0101cija kopum\u0101 \u013cauj samazin\u0101t riskus, kas saist\u012bti ar Windows sist\u0113mu izmanto\u0161anu, kuras paliku\u0161as bez atbalsta \u2014 t\u0101 nepiespie\u017e nodro\u0161in\u0101t sader\u012bbu ar jauniem aparat\u016bras l\u012bdzek\u013ciem, \u013cauj izsl\u0113gt vai kontrol\u0113t piek\u013cuvi sist\u0113mai caur t\u012bklu vai piesl\u0113dzam\u0101m ier\u012bc\u0113m un \u013cauj izveidot vidi vienreiz\u0113jai izmanto\u0161anai.<\/p>\n<p><\/p>\n<p>Qubes OS, kas balst\u0101s uz izol\u0101cijas ideju, izmantojot virtualiz\u0101ciju, pal\u012bdz izmantot \u0161os un citus meh\u0101nismus, lai nodro\u0161in\u0101tu dro\u0161\u012bbu. No \u0101rpuses daudzi redz Qubes vispirms k\u0101 tieksmi uz anonimit\u0101ti, ta\u010du t\u0101 ir noder\u012bga sist\u0113ma gan in\u017eenieriem, kuri bie\u017ei apvieno projektus, infrastrukt\u016bru un piek\u013cuves nosl\u0113pumus, gan ar\u012b dro\u0161\u012bbas p\u0113tniekiem. Lietojumprogrammu, datu un to mijiedarb\u012bbas form\u0101la dal\u012b\u0161ana ir s\u0101kuma so\u013ci draudu anal\u012bzei un aizsardz\u012bbas sist\u0113mas projekt\u0113\u0161anai. \u0160\u0101da dal\u012b\u0161ana pal\u012bdz struktur\u0113t inform\u0101ciju un samazin\u0101t cilv\u0113ka faktora k\u013c\u016bdu iesp\u0113ju \u2014 skr\u0113jiena, noguruma utt.<\/p>\n<p><\/p>\n<p>\u0160obr\u012bd galven\u0101 uzman\u012bba izstr\u0101d\u0113 tiek piev\u0113rsta Linux vid\u0113s funkcionalit\u0101tes papla\u0161in\u0101\u0161anai. Tiek gatavota versija 4.1, kas b\u016bs balst\u012bta uz Fedora 31 un iek\u013caus aktu\u0101las versijas galvenajiem komponentiem Xen un Libvirt. J\u0101atz\u012bm\u0113, ka Qubes izstr\u0101d\u0101 profesion\u0101\u013ci inform\u0101cijas dro\u0161\u012bbas jom\u0101, kuri vienm\u0113r \u0101tri izlaid\u012bs atjaunin\u0101jumus, ja tiks atkl\u0101ti jauni draudi vai k\u013c\u016bdas.<\/p>\n<p><\/p>\n<h2>P\u0113cv\u0101rds<\/h2>\n<p><\/p>\n<p>Viena no m\u016bsu att\u012bst\u012btaj\u0101m eksperiment\u0101laj\u0101m iesp\u0113j\u0101m \u013cauj izveidot VM ar atbalstu viesu piek\u013cuvei GPU balstoties uz Intel GVT-g tehnolo\u0123iju, kas \u013cauj izmantot grafisk\u0101 adaptora iesp\u0113jas un b\u016btiski papla\u0161in\u0101t sist\u0113mas pielietojuma jomu. Raksta rakst\u012b\u0161anas br\u012bd\u012b \u0161\u012b funkcionalit\u0101te darbojas Qubes 4.1 testa izlaidumiem un ir pieejama uz <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tabit-pro\/tabit-qubes-repo\">github<\/a><\/noindex>.<\/p>\n<p>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/488234\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u041f\u043e\u0434 \u043a\u0430\u0442\u043e\u043c \u043d\u0430\u0434\u0435\u044e\u0441\u044c \u044d\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Qubes \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (\u043e\u0442) \u0441\u0440\u0435\u0434\u044b Windows \u0438, \u043f\u043e\u043f\u0443\u0442\u043d\u043e, \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0443\u0441\u0441\u043a\u043e\u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u0447\u0435\u043c\u0443 Qubes? \u0418\u0441\u0442\u043e\u0440\u0438\u044f \u0441 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Windows 7 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41812,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 QubesOS \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Windows 7 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-16T17:45:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-16T17:45:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47QubesOS izmanto\u0161ana darbam ar Windows 7 | ProHoster","description":"Habr\u0101 nav daudz rakstu, kas velt\u012bti oper\u0113t\u0101jsist\u0113mai Qubes, un tie, kurus esmu redz\u0113jis, maz apraksta lieto\u0161anas pieredzi.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 QubesOS \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Windows 7 | ProHoster","og:description":"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/lv\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-16T17:45:57+00:00","article:modified_time":"2020-02-16T17:45:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:10:22","updated":"2022-10-05 20:31:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/41811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=41811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/41811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/41812"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=41811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=41811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=41811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}