Ukuqala ithumbu le-WireGuard njengesevisi ye-systemd

Unephrofayili ye-WireGuard ku-/etc/wireguard/wg0.conf futhi ufuna ukuthi ibe phezulu ngaphandle kokuthayipha i-wg-quick up ngesandla ngemva kwakho konke ukuqalisa kabusha. Ithempulethi ye-systemd evela kuphakheji yenza khona lokho: i-[email protected] isebenzisa i-wg-quick yephrofayili ebizwa ngokuthi i-wg0. Iphinde ifake amakheli, imizila, i-DNS nanoma yimaphi amahuku echazwa yiphrofayili, okuyinto engaphezu kokulayisha ukhiye ku-kernel. Qinisekisa ukuthi ithempulethi ikhona ohlelweni lwakho ngaphambi kokuthatha ukuthi ikhona.

Ingxenye esele yalo mhlahlandlela ilandela ukulandelana obekuzokwenza ngakho ngempela.

Thola iyunithi kanye nephrofayili eyifundayo

Bhala uhlu lwamafayela eyunithi nge-systemctl list-unit-files 'wg-quick*'. Kuma-distribution ayiphakhejile uzobona i-[email protected], kanti igama le-instance lithathwa kuphrofayili. I-instance ixazululwa ibe i-/etc/wireguard/<name>.conf, ngakho i-wg-quick@wg0 ifunda kuphela i-wg0.conf futhi akukho okunye. Uma uhlu lungenalutho, iphakheji yamathuluzi ayifakiwe futhi noma ngabe yikuphi ukunika amandla ngeke kusize.

Gcina iphrofayili kumodi engu-600 futhi ingeyakwa-root. Iqukethe ukhiye oyimfihlo, futhi iyunithi izosebenza ngokukhululekile ngemvume embi kakhulu uma uyivumela.

Yinyuse futhi ufunde ijenali

Qala i-instance nge-systemctl start wg-quick@wg0, bese uhlola i-systemctl status wg-quick@wg0 ne-journalctl -u wg-quick@wg0 -b. Iyunithi eqala bese iphuma ngokushesha ivamise ukuba nephutha lephrofayili, futhi ijenali isho umugqa. Qinisekisa nge-wg show ukuthi isixhumi esibonakalayo sikhona nokuthi ukuxhawula kokugcina kwakamuva. I-incwadi ye-wg-quick ibala okwenziwa iskripthi ngaphandle kwesixhumi uqobo.

Isixhumi esibonakalayo esilungisiwe ngaphandle kokuxhawula siyinkinga yendlela noma yokhiye, hhayi inkinga yesevisi.

Gcina umphathi oyedwa enomthwalo wemfanelo

Uma i-NetworkManager noma elinye iklayenti selivele liphethe ithumbu, ukuqala kweyunithi ye-systemd kwakha umnikazi wesibili wesixhumi esifanayo, imizila ne-DNS. Izimpawu ziyadida: ithumbu liyaphuma, bese imizila inyamalala, noma i-DNS ibuyela emuva ngemva kwemizuzwana embalwa. Khetha umphathi oyedwa futhi ukhubaze omunye kuleyo phrofayili. Ijenali ivamise ukukhombisa ukuthathwa njengezinguquko zemizila noma zesixazululi ngokushesha ngemva kokuba iyunithi ibike impumelelo.

Abaphathi ababili ababelani ubunikazi. Bayabhala phezu komunye nomunye.

Hlola ukumisa, ukuqalisa kabusha nokuqalisa

Sebenzisa i-systemctl stop wg-quick@wg0 bese uqinisekisa ukuthi isixhumi asisekho nokuthi imizila isusiwe. Bese uyiqala futhi futhi uhlole ukuthi imizila iyabuya, ngoba amaphutha okuhlakaza avela njengemizila esele hhayi njengokuqalisa okuhlulekile. Ekugcineni yinike amandla lapho kuqalwa nge-systemctl enable --now wg-quick@wg0 bese uqalisa kabusha kanye.

Lapho kuqalwa, igama lendawo yokugcina kufanele lixazululwe ngaphambi kokuba iyunithi isebenze. Uma i-DNS ingakaphumi, iyunithi iyahluleka futhi ihlala ihlulekile kuze kube yilapho uyiqala ngesandla.

Bhala phansi umnikazi

Bhala ukuthi iyunithi ifunda iphi iphrofayili, imuphi umphathi ophethe isixhumi nokuthi ifayela livela kuphi. Lapho othile kamuva engenisa ithumbu elifanayo kuklayenti yedeskithophu, leyo nothi iyimehluko phakathi kokufuduka nokuthunyelwa okubili okulwela ikheli elilodwa. Bhala futhi igama lesixhumi, ngoba amaphrofayili amabili anamagama afanayo awomthombo ojwayelekile wokudideka.

Ithumbu elinabaphethe ababili lisebenza kuze kufike ukuqalisa kabusha kokuqala, bese liba yimfihlakalo. Yingakho leyo nothi ingeyasegumbini lokugcina hhayi emseleni wengxoxo.