Yadda ake amfani da Windows Sandbox don gwada ƙarin abubuwan da ake tuhuma ko masu aiwatarwa

Idan kun damu da shigar da tsawo, abin aiwatarwa, ko buɗe abin da aka makala, akwai wata hanya mai mahimmanci a hannunmu wacce bai kamata mu manta da ita ba: Windows Sandbox, don gwada kari ko shirye-shiryen aiwatarwa waɗanda ke haifar da shakkuYana kama da buɗe zama mai tsabta wanda, lokacin da aka rufe, yana shafe gaba ɗaya: sharar gida, sifili yana tsoratarwa.

Tunanin yana da sauki: gwada, gyara, ko snoop a cikin keɓe muhalli Ba ya taɓa babban shigarwar ku. Yana yin takalma da sauri, yana amfani da tsarin aikin Windows, kuma an tsara shi ta yadda kowane mai amfani da sigar da ta dace zai iya kunna ta a cikin dannawa biyu kawai.

Menene Windows Sandbox kuma ta yaya yake aiki?

Sandbox na Tagogi (Windows Sandbox ko WSB) shine a nauyi, na wucin gadi, tebur mai ware kayan aiki Yana gudana kamar kowane app. A ƙarƙashinsa, yana ba da damar hypervisor na Microsoft don ƙaddamar da ƙwaya mai zaman kanta, mai ɓarna, gaba ɗaya ta ware abin da ke faruwa a cikin kwaya daga tsarin runduna.

Shawarwarinsa a fili take: Duk lokacin da ka buɗe shi, yana farawa daga sabuwar Windows ɗin da aka shigar, ba tare da alamun zaman da suka gabata ba. Duk wani shirye-shirye ko fayilolin da kuka shigar a ciki an tsare su; idan kun rufe taga komai ya ɓace, kuma lokacin da kuka buɗe ta gaba za ku sami misali mai tsabta.

Idan aka kwatanta da injunan kama-da-wane, WSB tana bayarwa Yana farawa a cikin daƙiƙa, rage yawan amfani da ƙwaƙwalwar ajiya Kuma babu hotunan tsarin da za a sarrafa. Hakanan baya buƙatar shirya fayafai ko samfuri: akwati ne mai yuwuwar zubarwa wanda aka gina cikin Windows Pro, Enterprise, da Ilimi.

• Kunshe a cikin Windows: wani ɓangare ne na tsarin a cikin bugu masu jituwa, ba tare da ƙarin zazzage hoto ba.
• Za a iya zubarwa: duk abin da ya faru a ciki yana gogewa lokacin rufewa.
• Tsaftace a kowane farawa: takalma a matsayin tsaftataccen shigarwa na Windows.
• Hakika: Keɓancewa ta hanyar sarrafa kayan aiki na tushen kayan aiki da Microsoft hypervisor.
• Inganci: agile fara, Virtual GPU na zaɓi da fasaha na sarrafa ƙwaƙwalwar ajiya.

Don amfanin yau da kullun, wannan yana nufin zaku iya shirye-shiryen gwaji marasa haɗari, Ziyarci shafukan yanar gizo masu tuhuma, ko duba abubuwan da aka makala ba tare da lalata kwamfutarka ba. Idan wani abu ya yi kuskure, zaku iya rufe Sandbox kuma shi ke nan.

Menene software na sandbox?

Software na “sandbox” yana ƙirƙira yanayi mai kama da iyaka inda za ku iya tafiyar da matakai a cikin tsari mai sarrafawa. Yana sanya keɓancewa tsakanin abin da kuke gwadawa da ainihin tsarin ku, ta yadda duk wani sakamako mai lahani ko halayen mugunta an lullube shi.

Wannan dabarar tana ƙara wasu albarkatu sama da ƙasa, a, amma a cikin sakamakon hakan yana tabbatar da hakan ba ku gurbata babban kayan aikin ku ba Ba ku ma "datti" wurin yin rajista ko ainihin tsarin fayil ɗin ba. Windows yana haɗa shi cikin WSB don bayar da shi azaman daidaitaccen tsari a cikin Pro da Enterprise (duka Windows 10 da Windows 11).

Baya ga tsaro, akwatin yashi yana da amfani sosai gwajin software, demos, QA da haɓakawa. Yana ba ku damar sake haifar da yanayi mai tsabta, maimaita al'amura, da watsar da canje-canje tare da dannawa ɗaya.

Yana da mahimmanci a bayyana a sarari game da yanayinsa: Ba VM ba ne "na al'ada" na dindindinMakullin anan shine rashin ƙarfi, yana ba ku damar gwaji cikin sauƙi kuma ku koma murabba'i ɗaya a kowane farawa.

Abubuwan da suka dace da lasisi

An kunna WSB a ciki Windows 10/11 Pro, Kasuwanci da Ilimi (duba Sigogi na Windows 11), gami da bambance-bambancen karatu kamar Pro Education/SE. A cikin Gida, ta hanyar ƙira, Ba a samu ba.

Game da haƙƙin amfani, lasisin Windows Pro/Pro Education/SE da tsare-tsaren kasuwanci Kasuwanci (E3/E5) da ilimi Ilimi (A3/A5) sun haɗa da haƙƙin amfani da Windows Sandbox. Idan kuna zuwa daga Gida kuma kuna sha'awar wannan fasalin, tsalle zuwa Pro Yawancin lokaci ita ce hanya mafi kai tsaye.

Bukatun Hardware da shawarwari

Don yin aiki, kuna buƙatar a 64-bit CPU tare da haɓakawa (Intel VT-x ko AMD-V), an kunna haɓakawa a cikin BIOS/UEFI, da tsarin aiki mai jituwa. Don Windows 10, ana buƙatar sigar 1903 ko kuma daga baya don bugu na Pro/Interprise; don Windows 11, ana buƙatar sigar 1903 ko kuma daga baya don bugu na Pro ko Enterprise.

Aƙalla, Microsoft yayi magana game da 4 GB na RAM, 1 GB na sarari kyauta da kuma 2 cores. Yanzu, don kasancewa a saman abubuwa, manufa shine a samu 8 GB ko fiye na RAM da kuma na'ura mai sarrafa 6-core/12-thread na zamani idan za ku gwada software mafi nauyi.

Ka tuna cewa duk abin da kuke gudu a ciki yana cinye albarkatu: idan kun gwada aikace-aikace masu buƙata, Ajiye RAM da headroom na CPU don kiyaye mai masaukin baki yana gudana lafiya. SSDs suna taimakawa da yawa don kiyaye komai yana gudana lafiya.

Shigarwa da kunna Windows Sandbox

Za ka iya kunna shi daga Windows interface kanta ko ta hanyar tuntuɓar yadda kunna kuma amfani da SandboxJe zuwa Ƙungiyar Sarrafa > Shirye-shirye > Kunna ko kashe fasalin Windows kuma zaɓi "Windows Sandbox" (ko "Windows Sandbox" dangane da yaren ku). Karɓa kuma sake farawa lokacin da aka sa.

Idan kun fi son na'ura wasan bidiyo, kawai buɗe PowerShell azaman mai gudanarwa kuma ku gudanar: Enable-WindowsOptionalFeature -FeatureName "Containers-DisposableClientVM" -All -Online. Idan an gama, sake kunna kwamfutarka.

Bayan sake kunnawa, buɗe menu na Fara, rubuta "Windows Sandbox" da gudu shi. Yana ɗaukar ɗan lokaci kaɗan na farko saboda saitin farko, amma ƙaddamarwa na gaba zai gudana kamar harsashi.

Lokacin da kuka fara, zaku ga a Tsaftace Windows, a cikin taga ɗaya, shirye don shigar da duk abin da kuke so. Yana da keɓaɓɓen yanayi: duk abin da kuka shigar akan ainihin PC ɗinku baya bayyana a cikikuma akasin haka.

Ƙaddamar da taga shine daidaitawa da ƙarfi Duk girman da kuka zaba. Ba dole ba ne ka ƙirƙiri asusu ko kunna lasisi: makasudin shine "buɗe, gwadawa, da rufewa" ba tare da rikici ba.

Ainihin, WSB yana farawa ba tare da hanzarin GPU ba kuma tare da tsarin tushe (a cikin jagororin da yawa za ku ga nassoshi zuwa 4 GB don muhalli). Idan kuna buƙatar ƙarin ƙwaƙwalwar ajiya ko don kunna vGPU, zaku iya yin haka tare da fayilolin sanyi na .wsb, kamar yadda zamu gani daga baya.

Yadda ake matsar da fayiloli, masu sakawa, da kari zuwa Windows Sandbox

Wannan ita ce tambayar dala miliyan: ta yaya zan sami mai sakawa ko fayiloli a cikin akwatin yashi? Akwai hanyoyi da yawa, kuma yana da kyau a zaɓa mafi aminci dangane da abin da kuke son gwadawa, Misali gwada kari na Chrome.

• Zaɓi na 1: Kwafi da liƙa. A mafi yawan lokuta zaka iya kwafi daga mai watsa shiri ka liƙa cikin Sandbox (gajerun hanyoyi na yau da kullun Ctrl + C / Ctrl + V). Idan za ku gwada wani abu mai haɗari, yana da kyau ku haɗa wannan tare da nakasa sadarwar sadarwar ko manyan fayiloli masu karantawa kawai don rage girman harin.
• Zaɓi na 2: Zazzage cikin Sandbox. Bude Edge a cikin akwatin sandbox kuma Sauke EXE/ZIP daga gidan yanar gizon masana'anta. Ta wannan hanyar, kuna guje wa canja wurin fayiloli daga mai watsa shiri kuma ku kiyaye kewayawa 100% sandboxed.
• Zaɓi na 3: Jadawalin taswira cikin yanayin karantawa kawai. Kuna iya saita babban fayil ɗin mai watsa shiri don bayyana a cikin Sandbox ta amfani da fayil ɗin .wsb kuma yi masa alama a matsayin Karantawa Kawai, ta yadda babu wani abu da ke faruwa a ciki zai iya gogewa ko gyara fayilolinku na gaske.
• Zaɓi na 4: Raba hanyar sadarwa (idan kun yarda). Haɓaka rabon runduna da samun damarsa daga Sandbox wata hanya ce, kodayake saboda dalilai na tsaro, ba shine wanda aka fi so ba don fayiloli masu haɗari masu haɗari.

Muhimmi: kar a dogara da ja da sauke a matsayin hanya don motsi fayiloli; kuma, ta hanyar zane, Kebul na filasha ba sa hawa kai tsaye da WSB. Idan kana buƙatar fayil daga kebul na USB, kwafi shi zuwa ga mai watsa shiri da farko kuma yi amfani da ɗayan hanyoyin da ke sama.

Babban tsari tare da fayilolin .wsb

WSB ya yarda Fayilolin daidaitawa na XML wanda ke daidaita halayen mahalli: ƙayyadaddun ƙwaƙwalwar ajiya, vGPU, cibiyar sadarwa, allo, sauti/bidiyo, da manyan fayilolin da aka tsara. Kuna buƙatar ƙirƙirar fayil tare da tsawo .wsb, ajiye shi kuma bude shi, kuma Windows za ta kaddamar da shi tare da wannan tsarin.

Ƙwaƙwalwar ajiya: Don keɓance amfani da RAM bayyane MemoryInMB. Misali, 8192 don 8 GB. Wannan yana da amfani idan za ku gudu ƙarin aikace-aikace masu buƙata a keɓe zaman.

<Configuration>
  <MemoryInMB>8192</MemoryInMB>
</Configuration>

GPU: Don ba da damar haɓakar haɓakar zane-zane, ƙara Kunna. Ta hanyar tsoho ba a kashe tunani game da rundunar tsaro da kuma rage kai hari.

<Configuration>
  <vGPU>Enable</vGPU>
</Configuration>

Fayilolin da aka tsara: tare da Jakunkuna masu taswira Kuna iya fallasa hanyar mai masauki a cikin Sandbox. Idan ka duba Karantawa Kawai as gaskiya, ka guji gogewa ko canje-canje akan PC ɗinka na ainihi koda kun yi kuskure a cikin akwatin yashi.

<Configuration>
  <MappedFolders>
    <MappedFolder>
      <HostFolder>C:\Users\Public\Downloads</HostFolder>
      <SandboxFolder>C:\Users\WDAGUtilityAccount\Downloads</SandboxFolder>
      <ReadOnly>true</ReadOnly>
    </MappedFolder>
  </MappedFolders>
</Configuration>

Haɗin zaɓuɓɓuka: Kuna iya haɗa ƙwaƙwalwar ajiya, vGPU da manyan fayiloli zuwa ƙirƙirar bayanan gwaji cewa ka bude tare da danna sau biyu lokacin da kake buƙatar su. Idan za ku gudanar da fayiloli na musamman, yi la'akari kashe cibiyar sadarwa a cikin .wsb kuma yi amfani da manyan fayiloli masu karantawa kawai.

Iyakoki da la'akarin aminci

WSB ba harsashin azurfa ba ne: wasu ci-gaba malware Yana iya gano mahallin kama-da-wane kuma ya “halay” har sai ya kai ga mai masaukin baki. Koyaya, keɓantawar kayan aikin da yanayin da za'a iya zubarwa sun sa shi mai matukar tasiri Layer na kariya ga mafi yawan al'amura.

Lokacin rufe Sandbox, komai ya bata: Cikakke don tsabtace tsarin, amma ba shi da amfani don gwaje-gwaje na dogon lokaci waɗanda ke buƙatar dagewa. A wannan yanayin, har yanzu za ku fi dacewa ta amfani da VM tare da hotunan hoto.

Akwai wasu iyakoki don tunawa: ba za a iya kashe shi ba lokuta da yawa lokaci guda; ciki ba a tallafawa wasu ƙa'idodi (Shafin Microsoft da wasu abubuwan amfani kamar Kalkuleta ko Notepad); kuma ba za ku iya loda "wani Windows" ban da Windows mai watsa shiri a cikin Sandbox (manta, misali, ƙaddamar da Windows 7 akan Windows 11 ta hanyar WSB).

Game da USB, firintocinku ko sauran abubuwan haɗin gwiwa, WSB baya fallasa na'urorin da aka karɓa Kai tsaye. Yana ba da fifiko ga keɓewa don tsaro, don haka daidaitaccen tsarin shine kwafi/ manna, zazzagewa cikin, ko taswira manyan fayiloli.

Tambayoyin da Ake Yawan Yi

• Zan iya amfani da WSB akan Windows Home? A'a, kawai a cikin Pro, Kasuwanci, da Ilimi (ciki har da Pro Education/SE). Idan kuna sha'awar, la'akari da haɓakawa.
• Zan iya amfani da ja da sauke? Ingantacciyar hanyar ita ce kwafi/manna, zazzagewa, ko manyan fayilolin taswira. DnD ba hanya ce da aka ba da shawarar ba.
• Ana tallafawa USB a cikin Windows Sandbox? Ta hanyar ƙira, kebul na USB da kayan aiki ba a hawa kai tsaye. Ci gaba da tafiya ta hanyar manyan fayilolin da aka tsara ko zazzagewar ciki.
• Nawa memori ke amfani da shi ta tsohuwa? Yawancin jagororin suna komawa zuwa 4 GB azaman tsarin tushe; idan gajere ne, yi amfani da MemoryInMB a cikin .wsb ɗin ku.
• Zan iya gudanar da shi sau da yawa lokaci guda? A'a, baya goyan bayan lokuta da yawa a lokaci guda a layi daya.
• Yana aiki ga duk malware? Don yawancin gwaje-gwaje, e, amma wasu ci-gaba na barazanar iya gano akwatin yashi. Babban kariya ce, ba cikakkiyar garkuwa ba.

Windows Sandbox ya zama “katin tsaro” wanda ke ba da hanyar gwaji mai kwarin gwiwa: yana ba ku sabbin windows kowane lokaci, ba tare da shigar da VMs ba, ba tare da daidaita hotuna ba, kuma tare da saitunan ci gaba a kowane fayil na .wsb don daidaita RAM, vGPU, cibiyar sadarwa, da manyan fayiloli masu karantawa kawai. Idan kuna aiki tare da kari, masu aiwatarwa, ko haɗe-haɗe waɗanda ba ku da tabbacin za ku iya sakawa akan PC ɗinku tukuna, kaddamar da akwatin yashi, gwaji, kuma rufe shi; ƙungiyar ku ta gaske za ta kasance da tsabta kamar yadda take a da.