I-apt purge isuse i-VPN, kodwa isevisi isaqala ngesikhathi sokuvula

I-apt purge ithi iphakethe lihambile, kodwa ithemba liyaphinda liphume ngaso sonke isikhathi sokuqala. I-journal iqhubeka nokukhula, imizila iyabuya, futhi umshini uziphatha sengathi akukho okususiwe. Isifaki somhlinzeki singabhala amafayela umphathi wamaphakethe angakaze awabhalise, ngakho ukususa iphakethe nokususa umkhiqizo kuyimisebenzi emibili ehlukene. I-runbook engezansi ihlukanisa amarekhodi amabili futhi iqeda ukususa ngamabomu.

Abafaki ababili, amarekhodi amabili ahlukene

Amaphakethe e-Debian agcina uhlu lwamafayela, futhi i-purge isusa ngqo lokho okushiwo wuhlu kanye nokulungiselelwa kwephakethe. Isifaki se-shell noma iphakethe le-.run aligcini lolo hlu; libhala noma kuphi, ngokuvamile ku-/opt, /usr/local kanye ne-/etc/systemd/system. Alukho kulolo hlu lwamafayela avela ohlwini lwanoma yiliphi iphakethe, ngakho i-dpkg ayilwazi futhi ayilubiki. Ekugcineni unabanikazi ababili bokufaka kusistimu eyodwa yamafayela, futhi oyedwa kuphela wabo ogcina izincwadi.

Buza i-dpkg ngomzila othile ngaphambi kokuwususa. Umzila ewuchithayo ungowakho ukuwususa, futhi impendulo efanayo itshela ukuthi ukuthuthukiswa kwakamuva kungawubuyisela yini.

dpkg -S /etc/systemd/system/acmevpn.service
systemctl list-unit-files | grep -i acmevpn

I-unit nesixhumanisi sayo se-wants amafayela ahlukene

Ukunika amandla kuyisenzo esihlukile ekufakeni. I-unit imemezela ubudlelwano bomgomo esigabeni sayo se-[Install], futhi i-systemctl enable iguqula lezo zimemezelo zibe izixhumanisi zesimboli ngaphakathi kwedijithali ye-.wants/ yomgomo ngamunye. Manje kunemizila emibili: ifayela le-unit, nesixhumanisi esiyidonsela emgomweni wokuvula. Susa ifayela kuphela futhi isixhumanisi asikhombi ndawo, okudala isikhalo ngesikhathi sokuvula; susa isixhumanisi kuphela futhi i-unit ihlala iqaleka ngokwegama. Kokubili kufanele kuhamba.

Zisuse ngokulandelana bese uphinda ulayishe, ukuze i-systemd iyeke ukugcina izincazelo ezindala ememorini.

systemctl disable --now acmevpn.service
systemctl show -p FragmentPath -p ExecStart acmevpn.service
sudo rm /etc/systemd/system/acmevpn.service
sudo rm /etc/systemd/system/multi-user.target.wants/acmevpn.service
systemctl daemon-reload

Funda i-FragmentPath esikhundleni sokucabanga indawo, ngoba umhlinzeki kungenzeka wabhala ku-/usr/lib/systemd/system noma ku-/lib/systemd/system hhayi ku-/etc. Ukususa ikhophi obuyilindele kushiya esebenzayo igijima, futhi ukulungiswa kubonakala kuyimpumelelo kuze kube ukulayisha okulandelayo. Bhala kabusha amafayela e-unit uma ukulayisha kuphelile, futhi uqinisekise ukuthi igama alisabonakali.

Thola i-binary egcina leli lungiselelo liphila

I-unit enikwe amandla iyaqhubeka nokuqalisa i-daemon noma yini ekholelwa yisizindalwazi samaphakethe. Leyo nqubo ingabuyisa ithemba, ingengeza imizila futhi, noma ibuyise umthetho we-kill-switch, futhi ukuziphatha kubonakala kungaphezu kwemvelo kuze kube uhlola ilungiselelo. Landela umzila we-ExecStart futhi uhlole ukuthi i-binary isekhona yini, ngoba ifayela elisebenzisekayo elishiywe ngaphansi kwe-/opt yikho konke okudingwa ilungiselelo. Ukususa i-unit kumisa ukuqala okuhleliwe; akususi uhlelo.

Phatha izincwadi zesimo ngokunakekela okufanayo. Amathokheni ekhawunti, amaphrofayili akhiqiziwe kanye nohlu lwamaseva agciniwe kuhlezi ngaphansi kwe-/var/lib noma kudijithali yasekhaya, futhi lezo ziwubufakazi, hhayi i-cache elahlwayo. Zisuse uma isevisi imisiwe, ngamabomu, futhi ubhale okuthathe kona.

sudo ls -l /opt/acmevpn /usr/local/bin/acmevpn
sudo find /var/lib -maxdepth 2 -iname "*acme*"
systemctl is-enabled acmevpn.service

Khetha umnikazi oyedwa wokuvula bese umhlola

Abazongenela ukhetho abathathu bangafuna ukuvula, futhi ukufaka bobathathu kudala umncintiswano hhayi isivikelo esiphindwe kabili. Ifayela lokuziqalela ledeskithophu lisebenza kuphela ngemva kokuba othile engene, i-unit ye-systemd isebenza ngaphambili kodwa idinga iklayenti elisebenza ngaphandle kwesikrini, futhi ukufakwa kwe-cron ye-@reboot kushaya ngokohlelo olungahle lube yiphutha kuklayenti lenethiwekhi. I-CLI yomhlinzeki ingase futhi idinge impikiswano yesiphakamiso, ngoba ekwuvuleni akukho seshini yangaphambilini yokuqhubeka. Khetha umzongenelayo ohambisana nendlela iklayenti eliqinisekisa ngayo, bese ulahla abanye.

Mhlole ngokuqalisa kabusha umshini futhi ubheka amaqiniso amathathu azimele: isimo se-unit, uhlu lwezinqubo, nokuxhumana okusha nento ongayiqinisekisa. Iklayenti elidinga i-keyring noma ukungena okusebenzisanayo lehluleka ekwuvuleni ngisho nenqwaba ye-unit efanele, futhi i-journal isho lokho uma uyifunda kunokuba ubheke isimo sesevisi kuphela.

Noma nikeza iklayenti ubufakazi obusebenza ngaphandle kombuzo, noma uqalise ekungeneni. Kokubili kuyavikeleka, futhi ukukuhlanganisa yikho okwenza ithemba elilodwa lithole abanikazi ababili abalwelayo.

Bhala okufanele i-purge elandelayo ikulindele

Bhala amaqiniso amabili ngemva kwanoma yikuphi ukususa ngesandla: isiphi isifaki esidale leli lungiselelo, futhi imuphi umnikazi osiqalisa manje. Lelo nothi liguqula i-purge elandelayo isuke ekumangaleni iye ekubeni yinto ohlwini lokuhlola, futhi liphila isikhathi eside kunomuntu owenza umsebenzi.

Ligcine eceleni kokulungiselelwa kwesevisi hhayi kudijithali yomuntu siqu, futhi ufake usuku, ngoba ukuthuthukiswa komhlinzeki kungabuyisa i-unit oyisusile. Ukuqhathanisa i-systemctl list-unit-files nalelo nothi njalo ezinyangeni ezimbalwa kubamba ukubuyiselwa ngesikhathi ukulungisa kusashibhile.