Me ya sa gargaɗin share hanyar vpnc ke fitowa a cikin kwantena

Sabbin rajistan kwantena sukan ƙare da ƙorafin Read-only file system game da /proc/sys/net/ipv4/route/flush, kuma ana ɗora wannan layin laifin rami da zai iya zama cikakke lafiya. Rubutun da ke bayansa yana nufin wani shigarwar kernel da ba ya yin wani abu mai amfani yanzu da ma'ajin hanyoyin IPv4 ya tafi. A cikin kwantena ana haɗa /proc/sys a matsayin karanta-kawai, don haka ana ƙin juya hanya kafin wata ƙima ta isa kuma harsashi yana buga wannan ƙin. Rami mai aiki zai iya buga wannan gargaɗin muddin tsohon layin ya kasance a cikin rubutun, kuma --privileged ba ya taɓa sa rubutun ya zama mai ma'ana.

Abin da rubutun ke ƙoƙarin sharewa

Tsofaffin rubutun haɗi suna ƙarewa da tsabtace ma'aji: rubuta ƙima a cikin fayil ɗin sarrafa kernel sannan ka nemi tarin IPv4 ya watsar da ma'ajin hanyoyin sa, don a zaɓi sabuwar hanyar rami ba tare da jiran tsofaffin shigarwar su ƙare ba. An yi wa fayil ɗin adireshi ƙarƙashin /proc/sys/net/ipv4/, wanda ya mai da aikin juya harsashi maimakon umarnin hanya. Kernel 3.6 ya cire wannan ma'ajin, tare da dalilin kasancewar sharewar. Babu wani abu a hanyar bayanan yanzu da ya dogara da wannan rubutun.

Shigarwar kanta ta tsira a matsayin tsohon fayil na rubutu-kawai, don haka rubutun da har yanzu ke rubutu a ciki yana isa ga ainihin hanya da ainihin binciken izini. A kan mai masauki rubutun yana dawo da nasara kuma ba ya canza komai. A cikin kwantena wannan juya hanya ɗaya ta faɗa kan /proc/sys karanta-kawai kuma ta kasa da EROFS, wanda harsashi ke bugawa a matsayin saƙon tsarin fayil na karanta-kawai. A kan kernel ɗin da hanyar ba ta wanzu da gaske, kalmomin suna zama No such file or directory, kuma ƙarshen ba ya canzawa.

Kuskuren biyu suna faɗin abubuwa daban-daban, kuma ya kamata a riƙe bambancin a sarari. Read-only file system yana nufin kernel ya isa wata shigarwa kuma ya ƙi rubutun; No such file or directory yana nufin shigarwar ta tafi. Babu ɗaya daga cikin saƙonnin da ke ba da rahoto game da na'urar rami, hanyoyi ko warware sunaye, don haka babu wanda zai iya tabbatar da ƙarin izini.

Tsari ne ke sa saƙon ya yi kama da sanadi. Rubutun haɗi yana girka hanyoyi, yana canza yanayin mu'amala kuma yana sake rubuta warware sunaye kafin ya isa tsabtacewar ƙarshe, don haka layin ƙarshe da aka buga shine layin da mutane ke ambata koda kowane muhimmin mataki ya dawo da nasara. Ramin da ya kafu kuma yana ɗaukar zirga-zirga yayin buga wannan gargaɗin ya dace da tsarin da ke sama daidai.

Duba haɗin da hanya kafin ƙara izini

Karatu uku sun raba gargaɗin kamanni daga ainihin gazawa: ko rubutun da aka girka har yanzu yana ɗauke da layin, yadda aka haɗa /proc/sys, da inda zirga-zirgar aikace-aikacen ke tafiya da gaske. Gudanar da su a cikin wannan sararin suna na kwantena ko a kan mai masaukin da gargaɗin ya bayyana, domin bincike a kan na'urar da ba ta da alaƙa yana amsa wata tambaya dabam.

grep -n 'ipv4/route/flush' /usr/share/vpnc-scripts/vpnc-script
findmnt -no OPTIONS /proc/sys
ip -4 route get 10.20.5.10

Amsar grep ta fi rauni fiye da yadda take gani, domin samun layin yana tabbatar da layin yana nan, ba wai yana gudana ba tare da tsaro ba; rubutun da aka kula zai iya ɗauke da rubutun a cikin tsaron da ke tsallake shi. findmnt -no OPTIONS /proc/sys yana warware haɗin kai tsaye, kuma ro a cikin wannan fitowar yana nufin kowane rubutu a ƙasan wannan wurin an ƙi shi, ko me rubutun zai yi. Sai binciken hanya ya nuna ko inda aikace-aikacen ke buƙata yana warware ta hanyar mu'amalar rami ko ta hanyar ƙofar da aka saba ta kwantena. Binciken da ya zaɓi ƙofar da aka saba yana nufin rami ya tashi kuma babu abin da ke tafiya cikinsa, wanda matsalar hanya ce ba matsalar izini ba.

Inda gyaran yake fitowa da gaske

Gyaran da aka kula yana zaune a cikin rubutun ba a cikin tutocin kwantena ba. upstream vpnc-script ya canza yadda yake tafiyar da wannan aiki, don haka kwatanta kwafin da ke cikin hoton da upstream na yanzu sannan ka sabunta ta hanyar fakitin ko ginin hoton da ke kawo shi. Fayil da aka gyara da hannu a cikin kwantena mai gudana ba a iya duba shi kuma ba zai tsira daga gini na gaba ba.

An rubuta --privileged a matsayin wanda ke ba da dukkan iyawa tare da faɗaɗɗen damar na'urori, babban sassauci don saƙon da ba ya canza komai, don haka ambaci iyawar da ta ɓace idan da gaske ɗaya ba ta nan. Bayan sabuntawa, sake binciken hanya kuma bar aikace-aikace ya yi amfani da ramin, domin shiru log da haɗin da ke aiki sakamako ne daban-daban.