Keyfile ko Netplan: ina ake ajiye bayanin VPN da gaske?

Nemo fayil ɗin da ka shigo da shi shine ɓangare mai sauƙi kuma sau da yawa farkon da ba daidai ba. Abin da ke da muhimmanci shi ne wane fayil NetworkManager ke karantawa a yau a matsayin haɗin da aka ajiye, kuma hakan ya dogara da mai gano haɗi da kuma wace hanyar saiti da fakitin da aka shigar suke amfani da ita a zahiri. Gyara shigarwar kafin a amsa wannan tambayar shine yadda VPN mai aiki ke zama saitin daidaitattun biyu rabin daidai.

Fayil ɗin da aka shigo da shi ba shine bayanin da aka ajiye ba

Sunaye uku suna yawo a kowane matsalar VPN: sunan haɗin, sunan fayil ɗin da ka shigo da shi, da maƙallin kama-da-wane da ke bayyana idan ramin ya tashi. Babu ɗayansu da ke gano saitin da aka ajiye, kuma ana iya gyara sunan haɗi yayin da fayil ɗin da ke bayansa ke riƙe ainihin mai ganonsa.

Fara da lissafin karatu kawai ka zaɓi VPN ɗin da ake nufi da mai gano maimakon da alama:

nmcli -f NAME,UUID,TYPE connection show

Ka bar sunayen masaukin ƙarshen hanya da alamomin asali a wajen kowane lissafi da ka liƙa a tikiti. Sashen da ke da amfani shine nau’i da mai gano; sauran mahallin ne da baƙo ba ya buƙatarsa. Rufe sauran kafin rabawa kuma ka ce ka yi haka, don kada wani ya yi mamakin abin da guraben ke nufi.

Wuraren keyfile ba su da ma’ana ɗaya

Da asalin keyfile plugin, fayilolin haɗi na iya bayyana a manyan fayiloli uku, kuma bambanci tsakaninsu shine dawwama, ba sauƙi ba.

Gyara kwafin lokacin aiki yana kama da nasara har sai farkon na gaba, lokacin da canjin ke ƙafewa kuma fayil ɗin ya kama da an mayar da shi cikin asiri. Gyara kwafin da fakitin ya bayar yana aiki har sai an sabunta shi ya maye gurbinsa, wanda shine jinkirin kuma mafi ruɗani na wannan darasi.

Takardun keyfile suna ƙara wani bayani da ya cancanci girmamawa: waɗannan fayilolin na iya ɗauke da maɓallan sirri da jimlolin wucewa, kuma NetworkManager yana watsi da duk wani keyfile da wasu masu amfani banda root za su iya karantawa ko rubutawa. Faɗaɗa izinin babban fayil don nemo saiti yana karya halin lodawa da kake ƙoƙarin dubawa.

Lokacin da Netplan ya mallaki dawwama

A Ubuntu, haɗin NetworkManager da aka bayyana a takardun Netplan, wanda ke samuwa daga 23.10 zuwa gaba, yana canza inda kwafin dawwama yake. Don haɗin da ba na ɗan lokaci ba yana rubuta /etc/netplan/90-NM-<connection UUID>.yaml kuma yana ƙirƙirar bayanin NetworkManager na wucin gadi a ƙarƙashin /run/NetworkManager/system-connections/.

Wannan haɗin rarraba ne, ba ka’ida ba ga kowace shigarwar NetworkManager. Tabbatar fakitin da aka shigar suna amfani da shi a zahiri kafin ka je neman fayil ɗin YAML. Ka kuma tuna cewa bayanin lokacin aiki na iya zama wakilcin da aka ƙirƙira na wani abu dabam maimakon tushen da ya cancanci gyara. Umarni biyu na dubawa suna ceton awa ɗaya na gyaran fayil ɗin da ba daidai ba.

Misalin da aka rubuta yana ajiye haɗin OpenVPN ta hanyar nau’in Netplan nm-devices tare da bayanan wucewar NetworkManager. Kasancewar Netplan ba shi da takamaiman fassarar wani filin VPN ba yana nufin an ɓata VPN ɗinka da aka ajiye ba; yana nufin filin yana tafiya a matsayin bayanai marasa fayyace.

Maƙallan wucin gadi ba bayanai ba ne

Kunnawa yana ƙirƙirar haɗe-haɗe da maƙallan kama-da-wane na ɗan lokaci waɗanda ba a taɓa nufin su dawwama ba. Haɗin da gangan ba ya rubuta sabon fayil ɗin YAML ga kowannensu, don haka rashinsu a /etc/netplan ba ya faɗin komai game da ko an ajiye babban bayanin.

Idan kana farautar fayil ɗin da ke bayyana kuma yana ɓacewa, wataƙila kana kallon ɗaya daga cikin waɗannan maimakon saitinka. Duba ko yana tsira da sake farawa kafin ka yanke wata shawara daga abin da ke cikinsa. Fayil ɗin lokacin aiki da ke ɓacewa a sake farawa yana gaya maka cewa bai taɓa zama tushe ba, kuma wannan kallo ɗaya yana juya dukan binciken. Hakan kuma yana bayyana dalilin da ya sa gyara ya yi kama da nasara a lokacin.

Sirri da mallaka

Bayanin na iya nuni ga takardar shaida ko maɓalli da aka ajiye a wani wuri daban, kuma kalmar sirri na iya kasancewa ta NetworkManager, ana bayar da ita daga wakilin sirrin zaman mai amfani, ko kuma a bar ta ba a ajiye ba da gangan. Don haka gano fayil ɗaya yana warware kaɗan game da abin da farawa ba tare da kulawa ba zai buƙata.

Duba nuni da tutocin sirri ba tare da buga ƙimar sirri ba. Shiga tebur na iya sa wakili ya samu wanda ba ya nan a lokacin boot, kuma kwafin fayil ɗin lokacin aiki da aka ƙirƙira ba ya sake haifar da wannan wakili. Alamar da ake gani ita ce ramin da ke haɗawa idan mutum ya shiga kuma ya kasa idan injin ya tashi shi kaɗai. Wannan tsarin yana nuni ga mallakar sirri, ba ga turawa ba.

Yi canje-canjen da aka amince da su ta hanyar manajan da ya mallaki haɗin, sannan ka tabbatar da mai gano da aka ajiye da haɗin da ke aiki duka. Ka riƙe mai dawwama ɗaya, domin gyara shigarwa, keyfile da aka ƙirƙira da tushen YAML da kansa yana barin bayanai uku masu hamayya game da abin da sake haɗawa na gaba zai yi amfani da shi. Zaɓi wanda ke dawwama da gaske, gyara shi kaɗai, kuma rubuta a tikiti wane fayil ka ɗauka a matsayin mai iko. Mutum na gaba zai gode maka don layi ɗaya na asali.