Lungiselela indlela yokubuyisela ye-serial ngaphambi kokushintsha i-VPN ku-GCE

Iwindi lesibili le-SSH kuyo leyo interface akuyona indlela yokubuyisela. Yabelana ngomzila, umthetho we-firewall kanye ne-daemon ozokushintsha, ngakho iyahluleka ngesikhathi esifanele lapho uyidinga khona. Ngaphambi kokuhlela imizila ye-VPN ku-VM ye-Compute Engine, fakazela izinto ezintathu ezihlukene: ukuthi ungasebenzisa i-console ye-serial, ukuthi ungayifunda imiphumela yayo, nokuthi isivakashi sizokunika ngempela ukungena. Izihlolo ezingezansi zihamba ngalelo hlelo, ezishibhe kakhulu kuqala, ukuze imvume engekho itholakale ngaphambi kokuba ibaluleke.

Isinyathelo 1: qinisekisa imvume yohlangothi lwefu

Shono i-VM, iphrojekthi kanye nendawo ngqo, bese uhlola inqubomgomo yokufinyelela ye-serial evunyelwe yinhlangano. Umqondisi udinga imvume efanele, futhi ukufinyelela kwe-serial okusebenzisanayo kufanele kuvunyelwe kuleyo instance ngaphansi kwezilawuli zephrojekthi nenhlangano ezisebenzayo.

Ungayihlulisi inqubomgomo yenhlangano noma uvule ukufinyelela kwe-console kuyo yonke iphrojekthi ukuze ulungiselele umshini owodwa. Cela umnikazi ukuthi ahlele indlela evunyelwe ngaphambi kocwaningo, hhayi ngesikhathi sokuphazamiseka.

Isinyathelo 2: fakazela ukuthi ungawufunda umphumela

Ukufunda umphumela we-serial ukuhlolwa okushibhe kakhulu, futhi kuqeqesha ukuthutha ngaphandle kokuthinta ukungena kwesivakashi:

gcloud compute instances get-serial-port-output VM_NAME \
    --project PROJECT_ID --zone ZONE --port 1

Shintsha izikhombisi bese usebenzisa iphothi evunyelwe. Imiyalezo yokuqalisa kanye nengxoxo ye-console kukutshela ukuthi isiteshi siyasebenza. Akufakazeli ukuthi ungathola i-shell. Yingakho lesi sinyathelo sihlukile kwesilandelayo.

Isinyathelo 3: fakazela ukuthi ungathola ukungena okusebenzisanayo

Umyalo wokuxhuma uvula iseshini yangempela, hhayi umbono wangaphambili:

gcloud compute connect-to-serial-port VM_NAME \
    --project PROJECT_ID --zone ZONE --port 1

Yiphatha njenge-console ebukhoma. Qinisekisa indawo yokugcina ngaphambi kokuthayipha ubufakazi, ngoba ukucindezela kokhiye ngakunye kuwela ku-instance.

Yilapha lapho uhlelo olwabonakala luphelele luwa khona. Imvume yefu iwumkhawulo owodwa futhi isicelo sokungena se-Linux ngomunye, futhi ukudlula kowokuqala akusho lutho ngowesibili.

Isinyathelo 4: lungiselela ubufakazi isivakashi esizobamukela

Izithombe ze-Linux ezinikezwa yi-Google azivuli ukungena kwasekhaya ngephasiwedi ngokuzenzakalela. Ngakho iseshini ye-serial ingafika esicelweni sokungena bese ima lapho, ilindele ubufakazi obungabekwanga muntu.

I-akhawunti yokubuyisela evunyelwe, noma inoma iyiphi indlela yokungena yesivakashi ebhalwe phansi esetshenziswa ukuthunyelwa kwakho, kufanele ibe khona futhi ihlolwe. Ukhiye we-SSH osebenza kunethiwekhi awukuhlangabezani ngokuzenzakalela isicelo sephasiwedi se-console, ngakho hlola ukuhlelwa kwangempela kwe-OS Login nokhiye esikhundleni sokucabanga ukuthi kuyasibhekela lesi simo.

Gcina ubufakazi bokubuyisela buyimfihlo. Iphasiwedi ye-root enanyathiselwe esibonelweni startup-script esidlangalaleni ingcindezi yesibili elindele ukwenzeka.

Isinyathelo 5: rekhoda umnikazi nokuhlehla

Ngaphambi kokushintsha noma yini, gcina ukuhlelwa kwenethiwekhi okusebenzayo futhi ubhale ukuthi ngubani oyilawulayo, iyiphi insizakalo ye-VPN eholekile nokuthi ukuhlehla kwenziwa kanjani. Kusuka kuseshini esebenzayo, thatha imizila yamanje, imithetho kanye nesimo sensizakalo.

Yilowo mbhalo oguqula isiteshi sokubuyisela sibe ukulungisa, ngoba i-console ikunika isicelo kuphela. Yibhale ngaphambi koshintsho, hhayi ngemuva kwalokho ngokukhumbula. Ukuhlehla okukopishwe ku-wiki akukona ukuhlehla. Kuwukuqagela okunenombolo yenguqulo.

Isinyathelo 6: qinisekisa ngemuva koshintsho

Iseshini ye-SSH ekhona ingasinda kunqubomgomo evimbela ezintsha, ngakho hlola ngeseshini ejwayelekile yokuphatha entsha. Bese uhlola ngokwehlukile ukuziphatha kwe-VPN okushintshile.

Gcina isiteshi sokubuyisela sivuliwe kuze kudlule zombili izihlolo, bese usivala ngokuhambisana nenqubomgomo yokufinyelela. Uma i-SSH isilahlekile futhi kungakalungiselelwa ukungena kwe-console, yeka ukuthatha ukufinyelela kwe-serial njengenethi yokuphepha bese uqala uhlelo olugunyaziwe lokubuyisela i-akhawunti noma ukulungisa i-instance. Ukumisa enye i-VM njenge-jump host akulungisi indlela yesivakashi noma ubufakazi obugele.