Wani abu yana ta kunna OpenVPN unit: gano tushen

Wani instance na OpenVPN yana fitowa a lokacin tashi a ƙarƙashin sunan da ba ka sani ba, kuma dakatar da shi yana aiki har zuwa sake tashi na gaba. Wannan tsarin yana nufin ka cire tsarin aiki amma ba kunnawa ba. Abubuwa biyu ne daban, kuma ɗayansu ne kawai yake bayyana a allon yanayi. Don gano kunnawar ana buƙatar umarni huɗu na karatu kawai da yanke shawara ɗaya.

Fara ambaci ainihin unit ɗin

Fara daga sunan unit a cikin journal maimakon daga sunan fayil ɗin profil. Ana iya kiran instance ɗin openvpn@, openvpn-client@, openvpn-server@ ko wani abu na musamman ga rarraba, kuma yin hasashen sunan zai kai ka ga samfurin da bai dace ba. Fitowar yanayi tana ambaton unit ɗin da ya gudana a zahiri, kuma wannan shine kawai sunan da ke da mahimmanci a nan. Kwafa shi daidai, gami da duk wani ƙari.

Umarnin da ke gaba suna bayyana wannan unit ɗin ba tare da canza komai ba. systemctl show yana ba da rahoton hanyar guntu, hanyar tushe, yanayin fayil ɗin unit, duk wani drop-in da abin da ya kunna shi. list-dependencies --reverse yana nuna waɗanne unit ɗin da aka loda suke nuni gare shi. Dukansu na karatu kawai ne, don haka gudanar da su kafin ka kafa ka'ida.

Maye gurbin sunan da aka lura a ko'ina. Sunan misali da aka kwafa shine hanya mafi yawa don bincika sabis ɗin da ba daidai ba, kuma yana ba da amsoshi masu ƙarfin gwiwa game da unit ɗin da bai taɓa gudana ba.

Karanta samfurin don sanin sunan fayil ɗin

Unit na instance faɗaɗa samfuri ne, kuma samfurin yana yanke shawara wane fayil ɗin tsari yake karantawa. Layin umarni da ke ƙarewa da maɓallin ajiya na musamman ga instance yana komawa zuwa sunan instance da ƙarin. Idan ƙarin shine .conf kuma ana kiran instance ɗin old, fayil ɗin shine old.conf. Idan ka kira instance ɗin old.conf, wannan samfurin yana neman old.conf.conf.

Wannan daki-daki yana bayyana nau'in kwafi. Wani yana ƙara instance na biyu a ƙarƙashin sunan da bai dace ba, na farko yana ci gaba da gudana, kuma mai masaukin yana ƙarewa da tunnels biyu da log ɗaya mai ruɗani.

Karanta samfurin da ke aiki maimakon fayil ɗin da ka tuna ka gyara. Drop-in na iya maye gurbin layin umarni, kuma maye gurbin shine abin da ke gudana a lokacin tashi.

Bibiyar yadda yake shiga cikin ma'amalar tashi

Hanyoyi uku sun zama ruwan dare: hanyar wants daga wani manufa, buƙata daga wani unit, ko unit ɗin da mai ƙirƙira fakiti ya samar. Jerin dogaro juyi yana rufe biyun farko a matsayin shigarwar zane da aka loda. Bai rufe lokacin lokaci, ƙugiya ko buƙatar waje ba, shi ya sa jerin shaida ne ba cikakken bincike ba.

Fitowar da aka ƙirƙira a ƙarƙashin /run/systemd/generator samfur ne, ba tushe ba. Gyara ta yana wanzuwa har zuwa ƙirƙira ta gaba, shi ya sa gyaran da aka yi a can yana kama da nasara sannan ya koma baya.

Duba shigarwar da aka rubuta na fakitin kafin ka ɗauka inda mai ƙirƙira yake karantawa. Binciken da ba a rubuta ba na babban fayil shine dalilin da ya saba sa unit ya bayyana ba tare da hanyar kunnawa ba.

Cire kunnawa, ba kawai tsarin aiki ba

Idan instance ɗin an kunna shi kai tsaye kuma ya tsufa da gaske, systemctl disable --now yana dakatar da shi kuma yana cire hanyar tashi a mataki ɗaya. Da farko tabbatar wannan tunnel ɗin ba shine kawai hanyar gudanarwa zuwa ga mai masaukin ba. Umarnin misali ne na zagayowar rayuwa, ba shawara ba ce a dakatar da kowane VPN a kan na'urar. Gudanar da dubawa kafin umarnin, ba bayansa ba.

Rabin biyu suna iya rabuwa kuma ana yawan ruɗa su. Kashewa baya dakatar da sabis ɗin da ke gudana, kuma dakatarwa baya cire kunnawa, don haka umarnin sashe yana bayyana matsalar da ke dawowa a lokacin tashi.

Unit ɗin da aka kashe ana iya kunna shi har yanzu ta wani unit ko ta buƙata bayyananna. Lokacin da mai ƙirƙira ya mallaki kunnawa, gyara shigarwar mai ƙirƙira maimakon kashe fitowarsa. Rufe yana toshe ƙarin hanyoyi amma yana iya karya dogaro, don haka ba ya maye gurbin fahimta.

Tabbatar da sake tashi, ba da allon yanayi ba

Sake loda systemd idan ma'anar unit ko shigarwar mai ƙirƙira sun canza, sannan duba yanayin da ya biyo baya. Sake lodin daemon baya tura sabon profil cikin tunnel ɗin da ke gudana, don haka duba biyun daban ne. Shirya sake tashi kuma tabbatar instance ɗin ya kasance babu yayin da tunnel ɗin da ake nufi yana aiki har yanzu.

Riƙe tsohon profil har sai an fahimci mallakarsa, sannan cire shi ta hanyar da aka nufa. Nasara ita ce unit da babu shi da hanyar shiga mai aiki, ba unit ɗin da ya gaza da ya ɓace daga allon ɗaya ba.