Diyaari waddo soo-kabasho taxane ah ka hor beddelka VPN ee GCE

Daaqadda labaad ee SSH ee isla interface-ka ma aha waddo soo-kabasho. Waxay la wadaagtaa waddada, qaanuunka firewall-ka iyo daemon-ka aad wax ka beddeli doonto, sidaas darteed waxay ku guuldareysataa isla waqtiga aad u baahan tahay. Ka hor inta aanad tafatirin waddooyinka VPN ee VM Compute Engine, caddee saddex arrimood oo kala duwan: inaad isticmaali karto console-ka taxanaha ah, inaad akhrin karto soo-saarkiisa, iyo in martidu runtii ku siin doonto gelitaan. Hubinta hoose waxay socotaa habkaas, tan ugu jaban marka hore, si ogolaanshaha maqan loo ogaado ka hor inta aanu muhiim noqon.

Tallaabada 1: xaqiiji ogolaanshaha dhinaca daruurta

Magacow VM-ka saxda ah, mashruuca iyo aagga, ka dib hubi siyaasadda gelitaanka taxanaha ah ee ay hay’adda ansixisay. Maamulaha wuxuu u baahan yahay ogolaanshaha la xiriira, gelitaanka taxanaha ah ee isdhexgalka leh waa in loo furo tusaasadaas iyadoo hoos imanaysa kontaroolada mashruuca iyo hay’adda ee dhaqan galay.

Ha daciifin siyaasadda hay’adda hana shidin gelitaanka console-ka mashruuca oo dhan si aad u diyaariso hal mishiin. Weydii milkiilaha inuu diyaariyo habka la ogolaaday ka hor tijaabada, ma aha inta lagu jiro xannibaadda.

Tallaabada 2: caddee inaad akhrin karto soo-saarka

Akhriska soo-saarka taxanaha ah waa hubinta ugu jaban, waxayna tababartaa gaadiidka iyada oo aan taaban gelitaanka martida:

gcloud compute instances get-serial-port-output VM_NAME \
    --project PROJECT_ID --zone ZONE --port 1

Beddel aqoonsiga oo isticmaal dekedda la ogolaaday. Fariimaha boot-ka iyo sheekada console-ka waxay sheegaan in kanaalku shaqeeyo. Ma caddeeyaan inaad heli karto shell. Taasi waa sababta tallaabadan uga duwan tahay tan xigta.

Tallaabada 3: caddee inaad heli karto gelitaan isdhexgal leh

Amarka isku xirka wuxuu furaa fadhi dhab ah, ma aha hor-muuqaal:

gcloud compute connect-to-serial-port VM_NAME \
    --project PROJECT_ID --zone ZONE --port 1

Ula dhaqan sida console nool. Xaqiiji barta ugu dambeysa ka hor inta aanad qorin aqoonsiga, sababtoo ah riix kasta oo keyboard ah wuxuu ku dhacaa tusaasada.

Halkan ayay qorshaha dhammaystiran u muuqday ku burburaa. Ogolaanshaha daruurta waa hal xad iyo digniinta gelitaanka Linux waa mid kale, marinka kowaadna wax kama sheego tan labaad.

Tallaabada 4: diyaari aqoonsiga martidu ay aqbali doonto

Sawirrada Linux ee Google bixiso si caadi ah ma furaan gelitaanka maxalliga ah ee ku saleysan password-ka. Sidaas darteed fadhi taxane ah ayaa gaari kara digniinta gelitaanka oo halkaas ku istaagi kara, isagoo sugaya aqoonsi aan cidina dejin.

Waa inuu jiraa oo la tijaabiyaa akoon soo-kabasho oo la ansixiyay, ama hab kasta oo gelitaan marti ah oo la diiwaangeliyay oo ay isticmaasho geyntaada. Fure SSH oo ka shaqeeya shabakadda si otomaatig ah uma buuxiyo digniinta password-ka console-ka, sidaas darteed hubi habaynta dhabta ah ee OS Login iyo furayaasha halkii aad ka malayn lahayd inay daboolayso kiiskan.

Hay aqoonsiga soo-kabashada si qarsoodi ah. Password root oo lagu dhejiyay tusaale startup-script ah oo dadweyne waa dhacdo labaad oo sugaysa inay dhacdo.

Tallaabada 5: diiwaangeli milkiilaha iyo dib-u-noqoshada

Ka hor inta aanad wax beddelin, ilaali qaabeynta shabakadda shaqeysa oo qor cidda maamusha, adeegga VPN ee ku lug leh iyo sida dib-u-noqoshada loo sameeyo. Fadhi shaqeeya, qabso waddooyinka, qaanuunnada iyo xaaladda adeegga hadda.

Diiwaankaas ayaa kanaalka soo-kabashada u beddela dayactir, sababtoo ah console-ku wuxuu ku siinayaa oo keliya digniin. Qor ka hor beddelka, ma aha mar dambe xusuus ahaan. Dib-u-noqosho laga koobiyeeyay wiki ma aha dib-u-noqosho. Waa qiyaas leh lambar nuqul.

Tallaabada 6: xaqiiji ka dib beddelka

Fadhi SSH oo jira ayaa ka badbaadi kara siyaasad xannibaysa kuwa cusub, sidaas darteed ku tijaabi fadhi maamul caadi ah oo cusub. Kadib si gooni ah u tijaabi habdhaqanka VPN ee aad beddeshay.

Kanaalka soo-kabashada ku hay furan ilaa labada hubinba gudbaan, kadibna xir sida waafaqsan siyaasadda gelitaanka. Haddii SSH horey loo waayay oo aan gelitaan console la diyaarin, jooji u qaadashada gelitaanka taxanaha ah shabakad ammaan oo bilow habka la ogolaaday ee soo-kabashada akoonka ama dayactirka tusaasada. Viidhka VM kale oo jump host ah ma hagaajiso waddada martida ama aqoonsiga maqan labadaba.