{"id":41811,"date":"2020-02-16T20:45:57","date_gmt":"2020-02-16T17:45:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/ispolzovanie-qubesos-dlya-raboty-s-windows-7"},"modified":"2020-02-16T20:45:57","modified_gmt":"2020-02-16T17:45:57","slug":"ispolzovanie-qubesos-dlya-raboty-s-windows-7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","title":{"rendered":"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Na Habr\u00e9 nie je ve\u013ea \u010dl\u00e1nkov venovan\u00fdch opera\u010dn\u00e9mu syst\u00e9mu Qubes, a tie, ktor\u00e9 som videl, m\u00e1lo popisuj\u00fa sk\u00fasenosti s jeho aplik\u00e1ciou. D\u00fafam, \u017ee to naprav\u00edm na pr\u00edklade pou\u017eitia Qubes ako prostriedku ochrany prostredia Windows a z\u00e1rove\u0148 zhodnot\u00edm po\u010det rusky hovoriacich pou\u017e\u00edvate\u013eov syst\u00e9mu.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/9625f1a9464dc610d1f3266571cf8929.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Pre\u010do Qubes?<\/h2>\n<p><\/p>\n<p>Pr\u00edbeh s koncom technickej podpory Windows 7 a narastaj\u00faca nervozita pou\u017e\u00edvate\u013eov viedli k potrebe zorganizova\u0165 pr\u00e1cu tejto OS s oh\u013eadom na nasleduj\u00face po\u017eiadavky:<\/p>\n<p><\/p>\n<ul>\n<li>zabezpe\u010di\u0165 pou\u017eitie plne aktivovanej Windows 7 s mo\u017enos\u0165ou in\u0161tal\u00e1cie aktualiz\u00e1ci\u00ed a r\u00f4znych aplik\u00e1ci\u00ed pou\u017e\u00edvate\u013eom (vr\u00e1tane cez Internet);<\/li>\n<li>realizova\u0165 \u00fapln\u00e9 alebo selekt\u00edvne vyl\u00fa\u010denie sie\u0165ov\u00fdch interakci\u00ed za podmienok (re\u017eimy offline a filtr\u00e1cie prev\u00e1dzky);<\/li>\n<li>poskytn\u00fa\u0165 mo\u017enos\u0165 selekt\u00edvneho pripojenia extern\u00fdch nosi\u010dov a zariaden\u00ed.<\/li>\n<\/ul>\n<p><\/p>\n<p>Tak\u00e1to s\u00fastava obmedzen\u00ed predpoklad\u00e1 explicitne pripraven\u00e9ho pou\u017e\u00edvate\u013ea, preto\u017ee je povolen\u00e9 samostatn\u00e9 administrat\u00edvne z\u00e1sahovanie, a obmedzenia s\u00fa spojen\u00e9 nie s blokovan\u00edm jeho potenci\u00e1lnych akci\u00ed, ale s vyl\u00fa\u010den\u00edm mo\u017en\u00fdch ch\u00fdb alebo de\u0161trukt\u00edvneho programov\u00e9ho vplyvu. T.j. vn\u00fatornej poru\u0161ovate\u013e v modeli nie je.<\/p>\n<p><\/p>\n<p>Pri h\u013eadan\u00ed rie\u0161enia sme r\u00fdchlo upustili od my\u0161lienky realizova\u0165 obmedzenia vstavan\u00fdmi alebo dodato\u010dn\u00fdmi prostriedkami Windows, preto\u017ee je dos\u0165 \u0165a\u017ek\u00e9 efekt\u00edvne obmedzi\u0165 pou\u017e\u00edvate\u013ea s administr\u00e1torsk\u00fdmi pr\u00e1vami, pri\u010dom mu ponech\u00e1me mo\u017enos\u0165 in\u0161talova\u0165 aplik\u00e1cie.<\/p>\n<p><\/p>\n<p>\u010eal\u0161\u00edm variantom rie\u0161enia bola izol\u00e1cia pomocou virtualiz\u00e1cie. \u0160iroko zn\u00e1me n\u00e1stroje na desktopov\u00fa virtualiz\u00e1ciu (napr. tak\u00e9 ako virtualbox) nie s\u00fa dobre prisp\u00f4soben\u00e9 na rie\u0161enie \u00faloh bezpe\u010dnosti a uveden\u00e9 obmedzenia bude musie\u0165 pou\u017e\u00edvate\u013e neust\u00e1le manu\u00e1lne prep\u00edna\u0165 alebo konfigurova\u0165 vlastnosti hos\u0165uj\u00facej virtu\u00e1lnej ma\u0161iny (\u010falej VM), \u010do zvy\u0161uje riziko ch\u00fdb.<\/p>\n<p><\/p>\n<p>Na druhej strane sme mali sk\u00fasenosti s pou\u017eit\u00edm Qubes ako u\u017e\u00edvate\u013esk\u00e9ho stoln\u00e9ho syst\u00e9mu, ale existovali pochybnosti o stabilite pr\u00e1ce s hostite\u013esk\u00fdm Windows. Bolo rozhodnut\u00e9 overi\u0165 aktu\u00e1lnu verziu Qubes, preto\u017ee nastaven\u00e9 obmedzenia ve\u013emi dobre zapadaj\u00fa do paradigmatu tohto syst\u00e9mu, najm\u00e4 implement\u00e1cia \u0161abl\u00f3n virtu\u00e1lnych strojov a vizu\u00e1lna integr\u00e1cia. \u010ealej sa pok\u00fasim \u010do najstru\u010dnej\u0161ie rozpr\u00e1va\u0165 o ide\u00e1ch a n\u00e1strojoch Qubes na pr\u00edklade rie\u0161enia zadanej \u00falohy.<\/p>\n<p><\/p>\n<h2>Typy virtualiz\u00e1cie Xen<\/h2>\n<p><\/p>\n<p>Qubes je postaven\u00fd na hyperv\u00edzore Xen, ktor\u00fd minimalizuje funkcie spr\u00e1vy prostriedkov CPU, pam\u00e4ti a virtu\u00e1lnych strojov. V\u0161etka ostatn\u00e1 pr\u00e1ca s zariadeniami je s\u00fastreden\u00e1 v dom0 na b\u00e1ze Linuxov\u00e9ho jadra (v Qubes sa pre dom0 pou\u017e\u00edva distrib\u00facia Fedora).<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/d8bfeb6cc8daef0370c9d567486c0356.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Xen podporuje nieko\u013eko typov virtualiz\u00e1cie (budem uv\u00e1dza\u0165 pr\u00edklady pre architekt\u00faru Intel, aj ke\u010f Xen podporuje aj in\u00e9):<\/p>\n<p><\/p>\n<ul>\n<li>paravirtualiz\u00e1cia (PV) \u2014 re\u017eim virtualiz\u00e1cie bez pou\u017eitia hardv\u00e9rovej podpory, podob\u00e1 sa na kontajnerov\u00fa virtualiz\u00e1ciu, m\u00f4\u017ee sa pou\u017e\u00edva\u0165 pre syst\u00e9my s prisp\u00f4soben\u00fdm jadrom (v takomto re\u017eime funguje dom0);<\/li>\n<li>pln\u00e1 virtualiz\u00e1cia (HVM) \u2014 v tomto re\u017eime sa na zdroje CPU pou\u017e\u00edva hardv\u00e9rov\u00e1 podpora, a v\u0161etko ostatn\u00e9 zariadenie je emulovan\u00e9 prostriedkami QEMU. Je to najuniverz\u00e1lnej\u0161\u00ed sp\u00f4sob sp\u00fa\u0161\u0165ania r\u00f4znych OS;<\/li>\n<li>paravirtualiz\u00e1cia hardv\u00e9ru (PVH \u2014 ParaVirtualized Hardware) \u2014 re\u017eim virtualiz\u00e1cie s pou\u017eit\u00edm hardv\u00e9rovej podpory, ke\u010f pre pr\u00e1cu so zariadeniami pou\u017e\u00edvaj\u00fa ovl\u00e1da\u010de jadra hostite\u013esk\u00e9ho syst\u00e9mu, ktor\u00e9 s\u00fa prisp\u00f4soben\u00e9 mo\u017enostiam hyperv\u00edzora (napr\u00edklad zdie\u013eanej pam\u00e4ti), \u010d\u00edm sa eliminuje potreba emul\u00e1cie QEMU a zvy\u0161uje sa v\u00fdkon vstupu a v\u00fdstupu. Jadro Linuxu od verzie 4.11 m\u00f4\u017ee pracova\u0165 v takom re\u017eime.<\/li>\n<\/ul>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/ffafc6a75aa9248659848c4bf08956e1.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Od verzie Qubes 4.0 z d\u00f4vodu bezpe\u010dnosti prech\u00e1dzaj\u00fa na odmietanie pou\u017e\u00edvania re\u017eimu paravirtualiz\u00e1cie (vr\u00e1tane zn\u00e1mych zranite\u013enost\u00ed architekt\u00fary Intel, ktor\u00e9 s\u00fa \u010diasto\u010dne odstr\u00e1nen\u00e9 pou\u017eit\u00edm plnej virtualiz\u00e1cie), re\u017eim PVH sa pou\u017e\u00edva predvolene.<\/p>\n<p><\/p>\n<p>Pri pou\u017eit\u00ed emul\u00e1cie (re\u017eim HVM) sa sp\u00fa\u0161\u0165anie QEMU vykon\u00e1va v izolovanej VM nazvanej stubdomain, \u010d\u00edm sa zni\u017euj\u00fa rizik\u00e1 zneu\u017eitia potenci\u00e1lnych ch\u00fdb v implement\u00e1cii (projekt QEMU obsahuje mnoho k\u00f3du vr\u00e1tane kompatibility).<br \/>\nTak\u00fdto re\u017eim je v na\u0161om pr\u00edpade vhodn\u00fd pre Windows.<\/p>\n<p><\/p>\n<h2>Slu\u017eobn\u00e9 virtu\u00e1lne stroje<\/h2>\n<p><\/p>\n<p>V architekt\u00fare bezpe\u010dnosti Qubes je jednou z k\u013e\u00fa\u010dov\u00fdch schopnost\u00ed hyperv\u00edzora pren\u00e1\u0161anie PCI zariaden\u00ed do hos\u0165ovsk\u00e9ho prostredia. Vyl\u00fa\u010denie zariaden\u00ed umo\u017e\u0148uje izolova\u0165 hostite\u013esk\u00fa \u010das\u0165 syst\u00e9mu od vonkaj\u0161\u00edch \u00fatokov. Xen to podporuje pre re\u017eimy PV a HVM, v druhom pr\u00edpade je potrebn\u00e1 podpora IOMMU (Intel VT-d) \u2014 hardv\u00e9rov\u00e9 riadenie pam\u00e4te pre virtualizovan\u00e9 zariadenia.<\/p>\n<p><\/p>\n<p>T\u00fdmto sp\u00f4sobom sa vytv\u00e1ra nieko\u013eko syst\u00e9mov\u00fdch virtu\u00e1lnych strojov:<\/p>\n<p><\/p>\n<ul>\n<li>sys-net, ktor\u00fd preber\u00e1 sie\u0165ov\u00e9 zariadenia a ktor\u00fd sa pou\u017e\u00edva ako most pre \u010fal\u0161ie VM, napr\u00edklad implementuj\u00face funkcie firewallu alebo klienta sie\u0165 VPN;<\/li>\n<li>sys-usb, ktor\u00fd preber\u00e1 USB a in\u00e9 ovl\u00e1da\u010de perif\u00e9rnych zariaden\u00ed;<\/li>\n<li>sys-firewall, ktor\u00fd nepou\u017e\u00edva zariadenia, ale funguje ako firewall pre pripojen\u00e9 VM.<\/li>\n<\/ul>\n<p><\/p>\n<p>Na pr\u00e1cu s USB zariadeniami sa pou\u017e\u00edvaj\u00fa proxy slu\u017eby, ktor\u00e9 zabezpe\u010duj\u00fa najm\u00e4:<\/p>\n<p><\/p>\n<ul>\n<li>pre triedu zariaden\u00ed HID (human interface device) prenos pr\u00edkazov do dom0;<\/li>\n<li>pre prenosn\u00e9 nosi\u010de preposielanie objemov zariaden\u00ed do in\u00fdch VM (s v\u00fdnimkou dom0);<\/li>\n<li>preposielanie priamo USB zariadenia (pou\u017e\u00edva sa USBIP a prostriedky integr\u00e1cie).<\/li>\n<\/ul>\n<p><\/p>\n<p>V takejto konfigur\u00e1cii \u00faspe\u0161n\u00fd \u00fatok cez sie\u0165ov\u00fd z\u00e1sobn\u00edk alebo pripojen\u00e9 zariadenia m\u00f4\u017ee vies\u0165 k kompromit\u00e1cii iba spustenej slu\u017eobnej VM, a nie celej syst\u00e9mu. Po re\u0161tarte slu\u017eobnej VM sa na\u010d\u00edta do p\u00f4vodn\u00e9ho stavu.<\/p>\n<p><\/p>\n<h2>N\u00e1stroje integr\u00e1cie VM<\/h2>\n<p><\/p>\n<p>Existuje nieko\u013eko sp\u00f4sobov, ako interagova\u0165 s pracovnou plochou virtu\u00e1lneho stroja \u2013 in\u0161tal\u00e1cia aplik\u00e1ci\u00ed do hos\u0165ovsk\u00e9ho syst\u00e9mu alebo emul\u00e1cia videa prostriedkami virtualiz\u00e1cie. Medzi hos\u0165ovsk\u00e9 aplik\u00e1cie m\u00f4\u017eu patri\u0165 r\u00f4zne univerz\u00e1lne prostriedky vzdialen\u00e9ho pr\u00edstupu (RDP, VNC, Spice a podobne) alebo prisp\u00f4soben\u00e9 konkr\u00e9tnemu hyperv\u00edzoru (tak\u00e9to n\u00e1stroje sa zvy\u010dajne naz\u00fdvaj\u00fa hos\u0165ovsk\u00e9 utilitky). M\u00f4\u017ee sa pou\u017ei\u0165 aj zmie\u0161an\u00e1 varianta, ke\u010f hyperv\u00edzor emuluje vstup-v\u00fdstup pre hos\u0165ovsk\u00fd syst\u00e9m, zatia\u013e \u010do zvonka poskytuje mo\u017enos\u0165 pou\u017e\u00edva\u0165 protokol kombinuj\u00faci vstup-v\u00fdstup, napr\u00edklad ako u Spice. V tomto pr\u00edpade prostriedky vzdialen\u00e9ho pr\u00edstupu zvy\u010dajne optimalizuj\u00fa obraz, preto\u017ee predpokladaj\u00fa pr\u00e1cu cez sie\u0165, \u010do negat\u00edvne ovplyv\u0148uje kvalitu obrazu.<\/p>\n<p><\/p>\n<p>Qubes poskytuje vlastn\u00e9 prostriedky na integr\u00e1ciu VMs. Predov\u0161etk\u00fdm ide o grafick\u00fd subsyst\u00e9m \u2013 okn\u00e1 z r\u00f4znych VMs sa zobrazuj\u00fa na jednej pracovnej ploche s vlastn\u00fdm farebn\u00fdm or\u00e1movan\u00edm. Celkovo s\u00fa prostriedky integr\u00e1cie zalo\u017een\u00e9 na mo\u017enostiach hyperv\u00edzora \u2013 zdie\u013eanej pam\u00e4te (Xen grant table), prostriedkoch notifik\u00e1cie (Xen event channel), zdie\u013eanom \u00falo\u017eisku xenstore a protokole komunik\u00e1cie vchan. S ich pomocou s\u00fa implementovan\u00e9 z\u00e1kladn\u00e9 komponenty qrexec a qubes-rpc a aplika\u010dn\u00e9 slu\u017eby \u2013 presmerovanie zvuku alebo USB, prenos s\u00faborov alebo obsahu schr\u00e1nky, vykon\u00e1vanie pr\u00edkazov a sp\u00fa\u0161\u0165anie aplik\u00e1ci\u00ed. Existuje mo\u017enos\u0165 nastavi\u0165 politiky, ktor\u00e9 obmedzuj\u00fa dostupn\u00e9 slu\u017eby na VM. Na obr\u00e1zku ni\u017e\u0161ie je pr\u00edklad postupu inicializ\u00e1cie interakcie dvoch VMs.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/eb0706697196168d2d50a90e25090497.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Tak\u017ee pr\u00e1ca vo VM sa vykon\u00e1va bez pou\u017eitia siete, \u010do umo\u017e\u0148uje plne vyu\u017ei\u0165 auton\u00f3mne VMs a vyhn\u00fa\u0165 sa \u00faniku inform\u00e1ci\u00ed. Napr\u00edklad takto sa realizuje rozdelenie kryptografick\u00fdch oper\u00e1ci\u00ed (PGP\/SSH), ke\u010f sa s\u00fakromn\u00e9 k\u013e\u00fa\u010de pou\u017e\u00edvaj\u00fa v izolovan\u00fdch VMs a neop\u00fa\u0161\u0165aj\u00fa ich hranice.<\/p>\n<p><\/p>\n<h2>\u0160abl\u00f3ny, aplika\u010dn\u00e9 a jednorazov\u00e9 VMs<\/h2>\n<p><\/p>\n<p>Cel\u00e1 pr\u00e1ca pou\u017e\u00edvate\u013ea v Qubes prebieha vo virtu\u00e1lnych strojoch. Hlavn\u00fd hostite\u013esk\u00fd syst\u00e9m sa pou\u017e\u00edva na spr\u00e1vu ich \u010dinnosti a vizualiz\u00e1ciu. OS sa in\u0161taluje spolu so z\u00e1kladnou sadou virtu\u00e1lnych strojov na z\u00e1klade \u0161abl\u00f3n (TemplateVM). Tak\u00e1to \u0161abl\u00f3na predstavuje Linux VM na z\u00e1klade distrib\u00facie Fedora alebo Debian, s nain\u0161talovan\u00fdmi a nakonfigurovan\u00fdmi prostriedkami integr\u00e1cie, vyhraden\u00fdmi syst\u00e9mov\u00fdmi a u\u017e\u00edvate\u013esk\u00fdmi oddielmi. In\u0161tal\u00e1cia a aktualiz\u00e1cia softv\u00e9ru sa vykon\u00e1va cez predvolen\u00e9ho spr\u00e1vcu bal\u00edkov (dnf alebo apt) z nakonfigurovan\u00fdch repozit\u00e1rov s povinnou kontrolou digit\u00e1lneho podpisu (GnuPG). \u00da\u010delom tak\u00fdchto VM je zabezpe\u010di\u0165 d\u00f4veru vo\u010di aplika\u010dn\u00fdm VM, ktor\u00e9 na nich be\u017eia.<\/p>\n<p><\/p>\n<p>Aplika\u010dn\u00e1 VM (AppVM) pri \u0161tarte vyu\u017e\u00edva sn\u00edmku syst\u00e9mov\u00e9ho oddielu pr\u00edslu\u0161nej \u0161abl\u00f3ny VM a po skon\u010den\u00ed odstr\u00e1ni t\u00fato sn\u00edmku bez ulo\u017eenia zmien. Potrebn\u00e9 d\u00e1ta pou\u017e\u00edvate\u013ea s\u00fa ulo\u017een\u00e9 v jedine\u010dnom pre ka\u017ed\u00fa aplika\u010dn\u00fa VM u\u017e\u00edvate\u013eskom oddiele, ktor\u00fd je pripojen\u00fd do domovsk\u00e9ho adres\u00e1ra.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/604c4f94fdb9644b589f87104364dc20.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>U\u017eito\u010dn\u00e9 z poh\u013eadu bezpe\u010dnosti m\u00f4\u017ee by\u0165 pou\u017eitie jednorazov\u00fdch VM (disposableVM). Tak\u00e1to VM sa vytv\u00e1ra na z\u00e1klade \u0161abl\u00f3ny v momente \u0161tartu a sp\u00fa\u0161\u0165a sa s jedin\u00fdm cie\u013eom \u2014 vykonan\u00edm jednej aplik\u00e1cie, pri\u010dom po jej uzavret\u00ed kon\u010d\u00ed svoju \u010dinnos\u0165. Jednorazov\u00e9 VM m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 na otvorenie podozriv\u00fdch s\u00faborov, ktor\u00fdch obsah m\u00f4\u017ee vies\u0165 k zneu\u017eitiu zranite\u013enost\u00ed konkr\u00e9tnych aplik\u00e1ci\u00ed. Mo\u017enos\u0165 spustenia jednorazovej VM je integrovan\u00e1 do spr\u00e1vcu s\u00faborov (Nautilus) a e-mailov\u00e9ho klienta (Thunderbird). <\/p>\n<p><\/p>\n<p>Windows VM m\u00f4\u017ee by\u0165 tie\u017e pou\u017eit\u00e1 na vytvorenie \u0161abl\u00f3ny a jednorazovej VM, na to sa profil pou\u017e\u00edvate\u013ea pren\u00e1\u0161a do samostatn\u00e9ho oddielu. V na\u0161om pr\u00edpade sa t\u00e1to \u0161abl\u00f3na bude pou\u017e\u00edva\u0165 pou\u017e\u00edvate\u013eom na administrat\u00edvne \u00falohy a in\u0161tal\u00e1ciu aplik\u00e1ci\u00ed. Na z\u00e1klade \u0161abl\u00f3ny sa vytvor\u00ed nieko\u013eko aplika\u010dn\u00fdch VM \u2014 s obmedzen\u00fdm pr\u00edstupom do siete (\u0161tandardn\u00e9 mo\u017enosti sys-firewall) a bez pr\u00edstupu do siete v\u00f4bec (virtu\u00e1lne sie\u0165ov\u00e9 zariadenie sa nevytv\u00e1ra). Pre pr\u00e1cu v t\u00fdchto VM bud\u00fa dostupn\u00e9 v\u0161etky zmeny a aplik\u00e1cie, ktor\u00e9 s\u00fa in\u0161talovan\u00e9 v \u0161abl\u00f3ne, a aj v pr\u00edpade vniknutia programov s n\u00e1strahami, im nebude dostupn\u00fd sie\u0165ov\u00fd pr\u00edstup na kompromit\u00e1ciu.<\/p>\n<p><\/p>\n<h2>Boj proti Windows<\/h2>\n<p><\/p>\n<p>Pop\u00edsan\u00e9 mo\u017enosti s\u00fa z\u00e1kladom Qubes a funguj\u00fa celkom stabilne, probl\u00e9my za\u010d\u00ednaj\u00fa pri Windows. Pre integr\u00e1ciu Windows je potrebn\u00e9 pou\u017ei\u0165 s\u00fabor hos\u0165ovac\u00edch n\u00e1strojov Qubes Windows Tools (QWT), ktor\u00fd obsahuje ovl\u00e1da\u010de na pr\u00e1cu s Xen, ovl\u00e1da\u010d qvideo a sadu n\u00e1strojov na v\u00fdmenu inform\u00e1ci\u00ed (prenos s\u00faborov, clipboard). Proces in\u0161tal\u00e1cie a nastavenia je podrobne zdokumentovan\u00fd na str\u00e1nke projektu, tak\u017ee sa s vami podel\u00edme o na\u0161e sk\u00fasenosti s pou\u017e\u00edvan\u00edm.<\/p>\n<p><\/p>\n<p>Hlavnou v\u00fdzvou je v podstate absencia podpory vyvinut\u00e9ho n\u00e1stroja. K\u013e\u00fa\u010dov\u00ed v\u00fdvoj\u00e1ri (QWT) nie s\u00fa zjavne dostupn\u00ed a projekt integr\u00e1cie s Windows \u010dak\u00e1 na hlavn\u00e9ho v\u00fdvoj\u00e1ra. Preto bolo najprv nevyhnutn\u00e9 pos\u00fadi\u0165 funk\u010dnos\u0165 a z\u00edska\u0165 predstavu o mo\u017enosti jeho podpory v pr\u00edpade potreby samostatne. Najn\u00e1ro\u010dnej\u0161ou \u010das\u0165ou pre v\u00fdvoj a ladenie je grafick\u00fd ovl\u00e1da\u010d, ktor\u00fd emuluje grafick\u00fd adapt\u00e9r a displej pre generovanie obrazu v zdie\u013eanej pam\u00e4ti, \u010do umo\u017e\u0148uje zobrazi\u0165 cel\u00fd pracovn\u00fd st\u00f4l alebo priamo okno aplik\u00e1cie v prostred\u00ed hostite\u013esk\u00e9ho syst\u00e9mu. Po\u010das anal\u00fdzy pr\u00e1ce ovl\u00e1da\u010da sme upravili k\u00f3d pre zostavenie v prostred\u00ed Linux a spracovali sme sch\u00e9mu ladenia medzi dvoma hos\u0165uj\u00facimi Windows syst\u00e9mami. Po\u010das f\u00e1zy kr\u00ed\u017eov\u00e9ho zostavovania sme vykonali nieko\u013eko zjednodu\u0161enia najm\u00e4 v oblasti \"tichej\" in\u0161tal\u00e1cie util\u00edt a odstr\u00e1nili sme ob\u0165a\u017euj\u00facu degrad\u00e1ciu v\u00fdkonu pri dlhodobej pr\u00e1ci vo VM. V\u00fdsledky na\u0161ej pr\u00e1ce sme spracovali do samostatn\u00e9ho <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tabit-pro\/qwt-crossbuild\">repozit\u00e1ri<\/a><\/noindex>, \u010d\u00edm sme na chv\u00ed\u013eu <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/QubesOS\/qubes-issues\/issues\/5065\">in\u0161pirovali<\/a><\/noindex> hlavn\u00e9ho v\u00fdvoj\u00e1ra Qubes.<\/p>\n<p><\/p>\n<p>Najkritickej\u0161ou f\u00e1zou z h\u013eadiska stability hos\u0165ovacieho syst\u00e9mu je spustenie Windows, tu m\u00f4\u017eete vidie\u0165 zn\u00e1my modr\u00fd displej (alebo ho dokonca ani neuvid\u00edte). Pre v\u00e4\u010d\u0161inu zisten\u00fdch ch\u00fdb existovali r\u00f4zne obch\u00e1dzky \u2014 zrieknutie sa Xen ovl\u00e1da\u010dov blokov\u00fdch zariaden\u00ed, deaktiv\u00e1cia vyrovn\u00e1vania pam\u00e4te VM, fix\u00e1cia sie\u0165ov\u00fdch nastaven\u00ed a minimaliz\u00e1cia po\u010dtu jadier. Na\u0161a zostava hos\u0165ovsk\u00fdch n\u00e1strojov sa in\u0161taluje a funguje na plne aktualizovanej Windows 7 a Windows 10 (okrem qvideo).<\/p>\n<p><\/p>\n<p>Pri prechode z fyzick\u00e9ho prostredia do virtu\u00e1lneho vznik\u00e1 probl\u00e9m s aktiv\u00e1ciou syst\u00e9mu Windows v pr\u00edpade pou\u017eitia predin\u0161talovan\u00fdch OEM verzi\u00ed. Tak\u00e9to syst\u00e9my pou\u017e\u00edvaj\u00fa aktiv\u00e1ciu na z\u00e1klade licenci\u00ed zaregistrovan\u00fdch v UEFI zariadenia. Pre spr\u00e1vne fungovanie aktiv\u00e1cie je potrebn\u00e9 prenies\u0165 do hos\u0165ovsk\u00e9ho syst\u00e9mu jeden z oddielov ACPI hlavn\u00e9ho syst\u00e9mu v celku (SLIC table) a mierne upravi\u0165 in\u00e9, pri\u010dom sa \u0161pecifikuje v\u00fdrobca. Xen umo\u017e\u0148uje prisp\u00f4sobova\u0165 obsah ACPI \u010fal\u0161\u00edch tabuliek, ale bez modifik\u00e1cie hlavn\u00fdch. S rie\u0161en\u00edm pomohol patch z podobn\u00e9ho projektu OpenXT, ktor\u00fd bol prisp\u00f4soben\u00fd pre Qubes. Opravy sa uk\u00e1zali ako u\u017eito\u010dn\u00e9 nielen pre n\u00e1s a boli prenesen\u00e9 do hlavn\u00e9ho repozit\u00e1ra Qubes a kni\u017enice Libvirt.<\/p>\n<p><\/p>\n<p>Zjavn\u00fdmi nedostatkami prostriedkov integr\u00e1cie Windows s\u00fa absencia podpory zvuku, USB zariaden\u00ed a zlo\u017eitosti pri pr\u00e1ci s m\u00e9diami, ke\u010f\u017ee nie je hardv\u00e9rov\u00e1 podpora GPU. Napriek tomu v\u0161ak uveden\u00e9 nebr\u00e1ni pou\u017e\u00edvaniu virtu\u00e1lnych strojov na pr\u00e1cu s kancel\u00e1rskymi dokumentmi a neprek\u00e1\u017ea spusteniu \u0161pecifick\u00fdch firemn\u00fdch aplik\u00e1ci\u00ed.<\/p>\n<p><\/p>\n<p>Po\u017eiadavka prechodu do re\u017eimu pr\u00e1ce bez siete alebo s obmedzenou sie\u0165ou po vytvoren\u00ed \u0161abl\u00f3ny Windows VM bola splnen\u00e1 vytvoren\u00edm pr\u00edslu\u0161n\u00fdch konfigur\u00e1ci\u00ed aplika\u010dn\u00fdch VM, a mo\u017enos\u0165 selekt\u00edvneho pripojenia prenosn\u00fdch nosi\u010dov sa tie\u017e rie\u0161ila be\u017en\u00fdmi prostriedkami OS \u2014 po pripojen\u00ed s\u00fa dostupn\u00e9 v syst\u00e9movej VM sys-usb, odkia\u013e m\u00f4\u017eu by\u0165 \"pren\u00e1\u0161an\u00e9\" do po\u017eadovanej VM. Pracovn\u00e1 plocha pou\u017e\u00edvate\u013ea vyzer\u00e1 pribli\u017ene takto.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Pou\u017eitie QubesOS na pr\u00e1cu s Windows 7\" src=\"\/wp-content\/uploads\/2020\/02\/ed003174a07a412071095cda51f7c2cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Kone\u010dn\u00e1 verzia syst\u00e9mu bola pou\u017e\u00edvate\u013emi pozit\u00edvne prijat\u00e1 (pokia\u013e to komplexn\u00e9 rie\u0161enie umo\u017enilo) a nat\u00edvne prostriedky syst\u00e9mu umo\u017enili roz\u0161\u00edri\u0165 jeho pou\u017eitie na mobiln\u00e9 pracovn\u00e9 miesto pou\u017e\u00edvate\u013ea s pr\u00edstupom cez VPN.<\/p>\n<p><\/p>\n<h2>Na z\u00e1ver<\/h2>\n<p><\/p>\n<p>Virtualiz\u00e1cia vo v\u0161eobecnosti umo\u017e\u0148uje zni\u017eova\u0165 rizik\u00e1 pou\u017e\u00edvania syst\u00e9mov Windows, ktor\u00e9 s\u00fa ponechan\u00e9 bez podpory \u2014 nen\u00fati k zabezpe\u010deniu kompatibility s nov\u00fdmi hardv\u00e9rov\u00fdmi prostriedkami, umo\u017e\u0148uje vyl\u00fa\u010di\u0165 alebo kontrolova\u0165 pr\u00edstup k syst\u00e9mu cez sie\u0165 alebo prostredn\u00edctvom pripojen\u00fdch zariaden\u00ed a umo\u017e\u0148uje vytvori\u0165 prostredie pre jednorazov\u00e9 spustenie.<\/p>\n<p><\/p>\n<p>Opera\u010dn\u00fd syst\u00e9m Qubes, zalo\u017een\u00fd na my\u0161lienke izol\u00e1cie pomocou virtualiz\u00e1cie, pom\u00e1ha vyu\u017e\u00edva\u0165 tieto a \u010fal\u0161ie mechanizmy na zabezpe\u010denie. Mnoh\u00ed to vidia najm\u00e4 ako snahu o anonymitu, ale je to u\u017eito\u010dn\u00fd syst\u00e9m nielen pre in\u017einierov, ktor\u00ed \u010dasto kombinuj\u00fa projekty, infra\u0161trukt\u00fary a tajomstv\u00e1 pr\u00edstupu k nim, ale aj pre odborn\u00edkov na bezpe\u010dnos\u0165. Rozdelenie aplik\u00e1ci\u00ed, \u00fadajov a formaliz\u00e1cia ich interakcie s\u00fa po\u010diato\u010dn\u00e9 kroky anal\u00fdzy hrozieb a projektovania ochrann\u00e9ho syst\u00e9mu. Tak\u00e9to rozdelenie pom\u00e1ha \u0161trukt\u00farova\u0165 inform\u00e1cie a zni\u017eova\u0165 pravdepodobnos\u0165 chyby sp\u00f4sobenej \u013eudsk\u00fdm faktorom \u2014 pon\u00e1h\u013ean\u00edm, \u00fanavou a podobne.<\/p>\n<p><\/p>\n<p>V s\u00fa\u010dasnosti sa hlavn\u00fd d\u00f4raz pri v\u00fdvoji kladie na roz\u0161\u00edrenie funk\u010dnosti prostred\u00ed Linux. Pripravuje sa verzia 4.1, ktor\u00e1 bude zalo\u017een\u00e1 na Fedora 31 a bude zah\u0155\u0148a\u0165 aktu\u00e1lne verzie k\u013e\u00fa\u010dov\u00fdch komponentov Xen a Libvirt. Je potrebn\u00e9 poznamena\u0165, \u017ee Qubes vyv\u00edjaj\u00fa odborn\u00edci v oblasti informa\u010dnej bezpe\u010dnosti, ktor\u00ed v\u017edy promptne vyd\u00e1vaj\u00fa aktualiz\u00e1cie v pr\u00edpade zistenia nov\u00fdch hrozieb alebo ch\u00fdb.<\/p>\n<p><\/p>\n<h2>P\u00f3sledok<\/h2>\n<p><\/p>\n<p>Jedna z na\u0161ich vyv\u00edjan\u00fdch experiment\u00e1lnych funkci\u00ed umo\u017e\u0148uje vytv\u00e1ra\u0165 VM s podporou hos\u0165uj\u00faceho pr\u00edstupu k GPU na z\u00e1klade technol\u00f3gie Intel GVT-g, \u010do umo\u017e\u0148uje vyu\u017ei\u0165 mo\u017enosti grafick\u00e9ho adapt\u00e9ra a v\u00fdznamne roz\u0161\u00edri\u0165 oblas\u0165 pou\u017eitia syst\u00e9mu. K okamihu p\u00edsania tohto \u010dl\u00e1nku t\u00e1to funkcia funguje pre testovacie zostavy Qubes 4.1 a je dostupn\u00e1 na <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tabit-pro\/tabit-qubes-repo\">github<\/a><\/noindex>.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/488234\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f. \u041f\u043e\u0434 \u043a\u0430\u0442\u043e\u043c \u043d\u0430\u0434\u0435\u044e\u0441\u044c \u044d\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f Qubes \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (\u043e\u0442) \u0441\u0440\u0435\u0434\u044b Windows \u0438, \u043f\u043e\u043f\u0443\u0442\u043d\u043e, \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0443\u0441\u0441\u043a\u043e\u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u041f\u043e\u0447\u0435\u043c\u0443 Qubes? \u0418\u0441\u0442\u043e\u0440\u0438\u044f \u0441 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Windows 7 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0442\u0440\u0435\u0432\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41812,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41811","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 QubesOS \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Windows 7 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-16T17:45:57+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-16T17:45:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pou\u017e\u00edvanie QubesOS na pr\u00e1cu s Windows 7 | ProHoster","description":"Na Habr.net nie je ve\u013ea \u010dl\u00e1nkov venovan\u00fdch opera\u010dn\u00e9mu syst\u00e9mu Qubes, a tie, ktor\u00e9 som videl, m\u00e1lo opisuj\u00fa sk\u00fasenosti s jeho pou\u017eit\u00edm.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 QubesOS \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 Windows 7 | ProHoster","og:description":"\u041d\u0430 \u0425\u0430\u0431\u0440\u0435 \u043d\u0435 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Qubes, \u0430 \u0442\u0435, \u0447\u0442\u043e \u044f \u0432\u0438\u0434\u0435\u043b \u043c\u0430\u043b\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u043f\u044b\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/ispolzovanie-qubesos-dlya-raboty-s-windows-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-16T17:45:57+00:00","article:modified_time":"2020-02-16T17:45:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:10:22","updated":"2022-10-05 20:31:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/41811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=41811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/41811\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/41812"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=41811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=41811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=41811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}