I-CIFS mount yakho yehluleka ku-VPN ngenxa yokulandelana kwe-nsswitch

Ukwabelana kuphendula ngekheli futhi kuxhunywe ngegama, ngakho ukusesha kuyafa ngaphambi kokuba i-SMB iqale. Qhathanisa i-getent ne-host, bese ufunda umugqa we-hosts ngokulandelana.

Ithimba lisebenza. Iseva yamafayela iphendula i-ping ngekheli. Bese kuthi mount.cifs ngegama lomsingathi ihlale lapho isikhathi esithile futhi ibike ukuthi umsingathi awufinyeleleki, futhi uqala ukwakha kabusha iphrofayela ye-VPN eyayingeyona inkinga. Ku-Linux igama lixazululwa yi-glibc ngaphambi kokuba noma yiliphi iphakethe le-SMB libe khona, futhi ukulandelana kuleso sixazululi kungaqeda ukusesha ngaphambi kokuba i-DNS ibuzwe ngisho kanye. Lona umzila engiwuhambayo, uqala ngomyalo ohlulekile hhayi ngeklayenti.

Funda ukwehluleka endaweni efanele

Amathuluzi amabili ahamba ngezindlela ezahlukene eya egameni elilodwa, futhi ukuwaqhathanisa kudla umyalo owodwa. getent ihamba ngesitaki sezinsizakalo zamagama esilungisiwe; host ne-dig zibuza i-DNS ngqo futhi zingasinaki leso sitaki. Uma umbuzo oqondile ubuyisela ikheli kanti i-getent ayibuyiseli lutho, iseva ye-DNS iyafinyeleleka futhi ukuhlelwa kwesixazululi sakho yikho okuhlulekayo.

getent hosts fileserver.corp.example
host fileserver.corp.example 10.61.0.1
getent -s dns hosts fileserver.corp.example

Umyalo wesithathu unqumayo: uyiphoqa imithombo ye-DNS futhi weqa ingxenye esele yesitaki. Uma wona usebenza kanti getent ejwayelekile ayisebenzi, ubonisile ukuthi iphutha lisekulandelaneni, hhayi ethimbeni futhi hhayi esevani.

Umugqa we-hosts uwukulandelana okuma kusenesikhathi

Isixazululi se-glibc sifunda /etc/nsswitch.conf futhi sihamba nokufakwayo hosts: ukusuka kwesobunxele kuye kwesokudla. Izikhungo eziningi ziletha umugqa lapho ukusesha kwe-multicast kuza kuqala khona kunesenzo sokubuya kusenesikhathi esinanyathiselwe. Leso senzo akusona isihlobiso: lapho i-mDNS iphendula “not found”, [NOTFOUND=return] iqeda ukusesha konke, ngakho igama lebhizinisi alilokothi lithunyelwe kusixazululi esafakwa yi-VPN. Akukho okukubhala lokho, ngoba awukho umbuzo owathunyelwa owawungase wenqatshwe yisixazululi. Yingakho i-mount ibonakala ixhunywe bese ibika umsingathi ongafinyeleleki.

cat /etc/nsswitch.conf | grep '^hosts:'
# illustrative repair: dns before the early-return action
hosts: files myhostname mdns4_minimal dns [NOTFOUND=return] wins mdns4

Hambisa i-DNS ngaphambi kwesenzo sokubuya kusenesikhathi esikhundleni sokususa i-mDNS, futhi ukushintshe ngokuphathwa kokuhlelwa. Ukuhlela ngesandla kuhlala kuze kube ukwakhiwa kwe-image okulandelayo, bese ithikithi elifanayo lifika livela kumshini omunye ongakhumbuli ukulungiswa.

Isixazululi akusona isizinda sosesho

Ukuxazulula kudinga nokuthi igama lizanywe. Igama elingagcwele fileserver liba fileserver.corp.example kuphela lapho isizinda sosesho sinanyathiselwe kusikhombimsebenzisi esithwala umbuzo. I-VPN efaka iseva ye-DNS ngaphandle kohlu lwasesho ikhiqiza ukwehlukaniswa okuthile kakhulu: igama eligcwele liyaxazululeka futhi wonke amagama amafushane ayehluleka.

Hlola zombili izinhlobo ngaphambi kokuhlela iphrofayela, ngoba ukwehluleka kokubili kukhombisa izindawo ezahlukene. Kusiseva ye-systemd-resolved isixhumanisi sethimba sineziseva zaso nezizinda zomzila, ngakho funda isixhumanisi hhayi ifayela lomhlaba wonke.

resolvectl status
resolvectl query fileserver.corp.example
resolvectl dns
resolvectl domain

Uma umbuzo ubalwa kusixhumanisi esingasithwali ithimba, isizinda somzila asikho nakuba ikheli le-DNS likhona. Leyo inkinga yenqubomgomo ekuhlelweni kwe-resolved, hhayi inkinga yomzila ethimbeni.

Ama-container athwala ikhophi yawo yempendulo

I-container eyakhiwe nge-image evamile ivamise ukuletha resolv.conf engaguquki. Izinguquko zesixazululi ezenziwe kusiseva azifinyeleli kuyo, futhi nesizinda sosesho asifinyeleli, ngakho umsebenzi we-build ofaka ukwabelana ngethimba uyehluleka kuyilapho umyalo ofanayo usebenza ngaphandle kwe-container. Nika i-container izilungiselelo zayo ze-DNS nezosesho kufayela le-compose noma kuma-argument e-run, hhayi kuphela kuphrofayela yesiseva.

Hlola ngaphakathi kwe-container ngaphambi kokusola i-image. Imiyalo emibili ikhiqiza kabusha ukuxilongwa konke ngemizuzwana embalwa, futhi eyesibili ibonisa ukuthi isiphi isixazululi esaphendula ngempela.

Ngemva kwalokho kuphela bheka ukwabelana nesihlungi

Uma igama selixazululiwe, ukwehluleka okusele yizinkinga ezijwayelekile zenethiwekhi. I-SMB idinga i-TCP 445 eya esevani, futhi ukuphequlula uhlu lweqembu lokusebenza kuncike ezinsizakalweni zamagama okungenzeka ithimba alizidlulisi. Mephu ngegama lomsingathi esikhundleni sokulinda uhlu lugcwale, futhi vumela iklayenti likutshele ukuthi lifinyelele esigabeni sini. Ukuxhumana okunqatshiwe kanye ne-timeout ethule nakho kufanele kwehlukaniswe, ngoba okokuqala ngokuvamile kusho ukuthi kukhona okuphendulile kanti okwesibili kusho ukuthi akukho okuphendulile.

getent hosts fileserver.corp.example
nc -vz fileserver.corp.example 445
mount -t cifs //fileserver.corp.example/share /mnt/share \
  -o vers=3.1.1,username=svc_mount,uid=1000

Ikheli elixazululiwe eline-port 445 enqatshiwe noma ephelwe isikhathi inkinga ye-firewall noma yesilaleli ngakolunye uhlangothi. Igama elingaxazululwanga inkinga yesixazululi. Futhi i-mount eqinisekisa kodwa ebuyisela amaphutha ezimvume akusikho kokubili, ngakho ungaphindi uvule umbuzo wenethiwekhi uma isikhathi sesimisiwe.

Gcina isiphetho sincane njengobufakazi. Uma ikheli lisebenza kanti igama alisebenzi, ithimba lenza umsebenzi walo, futhi ukulungiswa kungokokulandelana kwesixazululi, isizinda sosesho noma ukuhlelwa kwe-container uqobo.

Izihloko ezihlobene